Approved changes feed: RSS · Atom

cpe:2.3:a:ecessa_corporation:ecessa_shieldlink_sl175ehq:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEcessa Corporation (54c0e916-aee9-5c89-994f-4df3fc5c5a3d)
ProductEcessa Shieldlink Sl175Ehq (fc6a203f-7126-5823-9d92-4f845b5c3993)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-25150 vulnerable 2026-06-08 05:11:29.499079 Ecessa ShieldLink SL175EHQ 10.7.4 Cross-Site Request Forgery via User Configuration
MEDIUM (5.3)
Ecessa ShieldLink SL175EHQ 10.7.4 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can craft a malicious web page with a hidden form to add a superuser account by tricking a logged-in administrator into loading the page.
Published: 2025-12-24T19:27:51.814Z
Updated: 2026-03-05T12:02:14.314Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.