Ecessa Edge Ev150
Approved changes feed: RSS · Atom
cpe:2.3:a:ecessa_corporation:ecessa_edge_ev150:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ecessa Corporation (54c0e916-aee9-5c89-994f-4df3fc5c5a3d) |
|---|---|
| Product | Ecessa Edge Ev150 (74f42fe0-91ff-5bab-a2ad-f95f87f1146a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-25152 |
vulnerable | 2026-06-08 05:11:29.502380 |
Ecessa Edge EV150 10.7.4 Cross-Site Request Forgery via User Configuration
MEDIUM (5.3)
Ecessa Edge EV150 10.7.4 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can craft a malicious web page with a form that submits requests to the /cgi-bin/pl_web.cgi/util_configlogin_act endpoint to add superuser accounts with arbitrary credentials.
Published: 2025-12-24T19:27:52.680Z
Updated: 2025-12-24T20:24:45.919Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.