CVE-2017-12589

ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack.

• CWE-352

• http://www.securityfocus.com/bid/100438Third Party Advisory, VDB Entry
• https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery_11.htmlExploit, Technical Description
• http://www.securityfocus.com/bid/100438Third Party Advisory, VDB Entry
• https://iscouncil.blogspot.com/2017/08/cross-site-request-forgery_11.htmlExploit, Technical Description

Published

Aug 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12583DokuWiki through 2017-02-19b has XSS in the at parameter (ak…
• CVE-2017-12584There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1.…8.8
• CVE-2017-12585SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX…
• CVE-2017-12586SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading i…
• CVE-2017-12587ImageMagick 7.0.6-1 has a large loop vulnerability in the Re…
• CVE-2017-12588The zmq3 input and output modules in rsyslog before 8.28.0 i…
• CVE-2017-12590ASUS RT-N14UHP devices before 3.0.0.4.380.8015 have a reflec…
• CVE-2017-12591ASUS DSL-N10S V2.1.16_APAC devices have reflected and stored…
• CVE-2017-12592ASUS DSL-N10S V2.1.16_APAC devices have a privilege escalati…
• CVE-2017-12593ASUS DSL-N10S V2.1.16_APAC devices allow CSRF.
• CVE-2017-12595The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arra…
• CVE-2017-12596In OpenEXR 2.2.0, a crafted image causes a heap-based buffer…