CVE-2018-20577 is a Critical Cross-Site Request Forgery (CSRF) vulnerability affecting Orange Livebox 00.96.320S devices, specifically impacting several CGI-BIN executables related to restoration, firewall, remote management, password setup, and firmware upgrades. With a CVSS score of 9.1, this vulnerability is easily exploitable over the network without user interaction, allowing an attacker to achieve high integrity and availability impacts, potentially leading to unauthorized configuration changes or device compromise. Despite its severity, there is currently no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
00.96.320sCPE matchmatch criteria | cpe:2.3:o:orange:arv7519rw22_livebox_2.1_firmware:00.96.320s:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.