CVE-2020-13259 - CVE House
Back to Database
Status published High CVE-2020-13259

A vulnerability in the web-based management interface of RAD SecFlow-1v...

Vulnerability Description

A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. This could be exploited in conjunction with CVE-2020-13260.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-13259

Credits & Attribution

No credits recorded in the NVD database.

References

More from rad

View All →
CVE-2020-13260
A vulnerability in the web-based management interface of RAD SecFlow-1v...
Medium 6.1

Affected Vendor

Affected Software

secflow-1v firmware
Vulnerable Versions:
os-image_sf_0290_2.3.01.26

Timeline

Official Publish: September 16th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.