CVE-2025-67013Medium· 6.5▾ SunlitThe web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical conf…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
The web management interface in ETL Systems Ltd DEXTRA Series ' Digital L-Band Distribution System v1.8 does not implement Cross-Site Request Forgery (CSRF) protection mechanisms (no tokens, no Origin/Referer validation) on critical configuration endpoints.
d0116s1ula-22454_firmware = 1.8d0116s1uia-22474_firmware = 1.8c0401s1ula-22418_firmware = 1.8c0801s1ula-22420_firmware = 1.8c1601s1ula-22422_firmware = 1.8c0401s1ula-22455_firmware = 1.8c0801s1ula-22457_firmware = 1.8c1601s1ula-22459_firmware = 1.8c1601s1uia-22479_firmware = 1.8d0104d1ula-22411_firmware = 1.8d0108d1ula-22413_firmware = 1.8d0104d1ula-22451_firmware = 1.8d0108d1ula-22453_firmware = 1.8d0108d1uia-22473_firmware = 1.8c0401d1ula-22419_firmware = 1.8c0801d1ula-22421_firmware = 1.8c0401d1ula-22456_firmware = 1.8c0801d1ula-22458_firmware = 1.8c0401d1uia-22476_firmware = 1.8h0108d1ula-22431_firmware = 1.8h0104d1ula-22460_firmware = 1.8h0108d1ula-22461_firmware = 1.8d0104s1ula-22410_firmware = 1.8d0108s1ula-22412_firmware = 1.8d0116s1ula-22414_firmware = 1.8d0104s1ula-22450_firmware = 1.8d0108s1ula-22452_firmware = 1.8Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11051Medium· 4.3A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0
CVE-2025-11029Medium· 4.3A weakness has been identified in givanz Vvveb up to 1.0.7.2
CVE-2025-12202Medium· 4.3A security flaw has been discovered in ajayrandhawa User-Management-PHP-MYSQL web up to fedcf58797bf2791591606f7b61fdad99ad8bff1
CVE-2017-20120Medium· 4.3A vulnerability classified as problematic was found in TrueConf Server 4.3.7
CVE-2024-0830Medium· 4.3The Comments Extra Fields For Post,Pages and CPT plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0
CVE-2025-5521Medium· 4.3A vulnerability was found in WuKongOpenSource WukongCRM 9.0