What’s Vulnerable › Vulnerabilities

CVE-2017-12589

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-08-18 · updated 2026-06-17
• Weakness: CWE-352

Description

ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack.

Affected products

• Tomaxcom R60G Firmware: 2.6.3-170330
• Tomaxcom R60Gv2 Firmware: 2.6.3-170330

References

• http://www.securityfocus.com/bid/100438
• https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery_11.html
• http://www.securityfocus.com/bid/100438
• https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery_11.html

Get alerted when CVE-2017-12589 or the next vulnerability affects your stack