CVE-2022-50804

5.1 mediumEPSS 0.3%

Medium (5.1) in jm-data onu jf511-tv firmware. EPSS 0.3% chance of exploitation in the next 30 days.

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery (CSRF) attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2025-12-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jm-data:onu_jf511-tv_firmware

References

https://cxsecurity.com/issue/WLB-2022060058
https://exchange.xforce.ibmcloud.com/vulnerabilities/229355
https://packetstormsecurity.com/files/167487/
https://www.jm-data.com/
https://www.vulncheck.com/advisories/jm-data-onu-jf-tv-cross-site-request-forgery-csrf-vulnerability

Check your stack JSON