CVE Feed

    Dashboard / CVE / CVE-2024-26153

    CVE-2024-26153

    All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request forgery (CSRF). An external attacker with no access to the device can force the end user into submitting a "setconf" method request, not requiring any CSRF token, which can lead into denial of service on the device.

    Published:Jan 17, 2025
    Last Modified:Jul 30, 2025
    EPS:Jan 17, 2025
    EPSS Score:0.00038
    CVSS Score:7.4

    Affected Products

    Vendor
    Etictelecom
    Product
    Remote Access Server Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-26155 (CVSS 6.1) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the w…
    CVE-2024-26154 (CVSS 4.8) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site…
    CVE-2024-26157 (CVSS 5.3) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site…
    CVE-2024-26156 (CVSS 4.8) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site…
    CVE-2023-3453 (CVSS 7.1) — ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This …
    CVE-2022-3703 (CVSS 7.6) — All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to acceptin…
    CVE-2022-40981 (CVSS 5.9) — All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior is vulnerable to malicious file upload…
    CVE-2022-41607 (CVSS 6.2) — All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High