CVE-2023-7092

Summary

CVE-2023-7092 is a newly identified vulnerability affecting the Uniway UW-302VP 2.0 Admin Web Interface. This issue, rated as problematic, lies in the processing of the file /boaform/wlan_basic_set.cgi. An attacker can exploit this cross-site request forgery vulnerability by manipulating the wlanssid/password argument. The exploit can be initiated remotely and the associated identifier is VDB-248939. Although the vendor was notified, they have not responded to the disclosure, leaving the vulnerability open to public exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.