CVE:CVE-2020-5549
CNNVD:CNNVD-202004-409
Plat’Home EasyBlocks IPv6是日本Plat’Home公司的一款IPv6地址集分配单元产品。
Plat’Home EasyBlocks IPv6 2.0.1及之前版本和2.0.1及之前版本中存在跨站请求伪造漏洞，该漏洞源于程序没有正确验证用户提供的输入。远程攻击者可借助特制的HTTP请求利用该漏洞执行非法操作。
solution:Upgrade plathome easyblocks_ipv6_firmware to a higher version than 2.0.1,and avoid the version (,2.0.1]; Upgrade plathome easyblocks_ipv6_enterprise_firmware to a higher version than 2.0.1,and avoid the version (,2.0.1]