CVE-2026-5572
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 is vulnerable to CSRF in an unknown function. The attack can be performed remotely, and the exploit has been publicly released.
Risk Assessment
An attacker can trick an authenticated user into performing unintended actions on the device, such as changing configuration, without their consent.
Recommendation
Contact the vendor for a patch. If unavailable, consider isolating the device from the network or applying additional security measures.
Original NVD description (English source)
A security flaw has been discovered in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30. This affects an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.