CVE-2020-10181: Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability

CVE-2020-10181 is a CSRF vulnerability in Sumavision Enhanced Multimedia Router (EMR) that enables an attacker to create users with elevated administrator privileges on the affected device. This flaw allows unauthorized privilege escalation through forged requests. The vulnerability has been confirmed to be exploited in the wild, increasing its risk profile. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation allows attackers to create administrative users on the device, potentially leading to full control over the affected system. This could compromise device integrity, confidentiality, and availability. The vulnerability has been exploited in the wild, indicating active threat scenarios.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the device management interface and implement CSRF protections where possible.