Security Advisory

CVE-2026-29521

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-16 16:55:34

Last updated 2026-03-17 15:29:46

Assigner VulnCheck

CVSS score 5.1

State PUBLISHED

Description

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify device configuration by exploiting missing CSRF protections in setup.cgi. Attackers can host malicious pages that submit forged requests using automatically-included HTTP Basic Authentication credentials to add RADIUS accounts, alter network settings, or trigger diagnostics.

← Browse all CVEs View on cve.org ↗