CVE-2019-25250 — Devolo dLAN 500 AV Wireless+ 3.1.0-1 Cross-Site Request Forgery
Devolo dLAN 500 AV Wireless+ 3.1.0-1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validatio…
Published: 2025-12-24 · CVSS: 5.1 · CVSS 4.0
Devolo dLAN 500 AV Wireless+ 3.1.0-1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft malicious web pages that trigger unauthorized configuration changes by exploiting predictable URL actions when a logged-in user visits the site.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7