CVE-2020-26732

7.5HIGH

SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this

Published: 1/14/2021Updated: 11/21/2024
View on NVDView on MITRE

Description

SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.

AI AnalysisPowered by AI

Affected Products

skyworthgn542vf_boa_firmware
0.94.13
skyworthgn542vf_boa
-

References