CSRF Vulnerability in JM-DATA ONU JF511-TV Allows Admin Actions

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: VulnCheck

Description

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery (CSRF) attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-30

Last Modified

2025-12-30

Generated

2026-07-06

AI Q&A

2025-12-31

EPSS Evaluated

2026-07-05

NVD

CVE-2022-50804

Affected Vendors & Products

Vendor	Product	Version / Range
jm-data	onu_jf511-tv	1.0.67

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-352	The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability is a cross-site request forgery (CSRF) in JM-DATA ONU JF511-TV version 1.0.67. It allows attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent.

Impact Analysis

An attacker exploiting this vulnerability can perform unauthorized administrative actions by tricking authenticated users into executing unwanted commands, potentially compromising the security and integrity of the affected device.

Hi! I’m here to help you understand CVE-2022-50804. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70