CISA Known Exploited Vulnerability

CVE-2020-10181

Sumavision · Enhanced Multimedia Router (EMR)

Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability

Date added
BOD 22-01 due date
CWE CWE-352
Ransomware Unknown

CISA description

Sumavision Enhanced Multimedia Router (EMR) contains a cross-site request forgery (CSRF) vulnerability allowing the creation of users with elevated privileges as administrator on a device.

Required action

Apply updates per vendor instructions.