CVE-2024-26153

Summary

CVE-2024-26153 is a cross-site request forgery (CSRF) vulnerability affecting all versions of ETIC Telecom Remote Access Server (RAS) before 4.9.19. An external attacker can exploit this flaw to force an end user into submitting a malicious "setconf" method request. This request does not require a CSRF token, allowing the attacker to cause a denial-of-service on the device. Successful exploitation of this vulnerability can lead to disrupted services, emphasizing the need for users to update their RAS software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.