CNNVD-202602-846 Information
CNNVD ID
CNNVD-202602-846
Related CVE
- CNNVD Published: 2026-02-05
Description (Chinese)
P5 FNIP-8x16A和P5 FNIP-4xSH都是英国P5公司的一款以太网继电器控制器。 P5 FNIP-8x16A和P5 FNIP-4xSH 1.0.20版本存在跨站请求伪造漏洞,该漏洞源于容易受到跨站请求伪造攻击,可能导致攻击者执行管理操作。
Description (English)
P5 FNIP-8x16A and P5 FNIP-4xSH are all Ethernet relay controllers of the British company P5. Versions P5 FNIP-8x16A and P5 FNIP-4xSH 1.0.20 contain a false gap in cross-site requests, which arises out of the vulnerability of cross-site requests to false attacks, which may lead the attackers to perform management operations.
Hazard Level
Critical
Vulnerability Type
跨站请求伪造
Affected Vendor
P5
Published
2026-02-05
Last Modified
2026-02-24
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/180253 https://packetstorm.news/files/id/157318 https://www.exploit-db.com/exploits/48362 https://www.p5.hu/ https://www.vulncheck.com/advisories/p-fnip-xa-fnip-xsh-cross-site-request-forgery-add-admin https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5564.php
Share on: