JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery (CSRF) attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Active

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00018.

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Jm-data Subscribe
Onu Jf511-tv Subscribe
Onu Jf511-tv Firmware Subscribe

Configuration 1 [-]

AND
OR cpe:2.3:o:jm-data:onu_jf511-tv_firmware:1.0.55:*:*:*:*:*:*:*
cpe:2.3:o:jm-data:onu_jf511-tv_firmware:1.0.62:*:*:*:*:*:*:*
cpe:2.3:o:jm-data:onu_jf511-tv_firmware:1.0.67:*:*:*:*:*:*:*
cpe:2.3:h:jm-data:onu_jf511-tv:-:*:*:*:*:*:*:*

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://cxsecurity.com/issue/WLB-2022060058 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/229355 cve-icon cve-icon
https://packetstormsecurity.com/files/167487/ cve-icon cve-icon
https://www.jm-data.com/ cve-icon cve-icon
https://www.vulncheck.com/advisories/jm-data-onu-jf-tv-cross-site-request-forgery-csrf-vulnerability cve-icon cve-icon
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5708.php cve-icon cve-icon cve-icon
History

Fri, 16 Jan 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'}

 cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Tue, 13 Jan 2026 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Jm-data
Jm-data onu Jf511-tv
Jm-data onu Jf511-tv Firmware
CPEs cpe:2.3:h:jm-data:onu_jf511-tv:-:*:*:*:*:*:*:*
cpe:2.3:o:jm-data:onu_jf511-tv_firmware:1.0.55:*:*:*:*:*:*:*
cpe:2.3:o:jm-data:onu_jf511-tv_firmware:1.0.62:*:*:*:*:*:*:*
cpe:2.3:o:jm-data:onu_jf511-tv_firmware:1.0.67:*:*:*:*:*:*:*
Vendors & Products Jm-data
Jm-data onu Jf511-tv
Jm-data onu Jf511-tv Firmware

Fri, 02 Jan 2026 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 30 Dec 2025 23:00:00 +0000

Type Values Removed Values Added
Description JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery (CSRF) attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent.
Title JM-DATA ONU JF511-TV 1.0.67 Cross-Site Request Forgery (CSRF) Vulnerability
Weaknesses CWE-352
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-01-16T19:00:14.014Z

Reserved: 2025-12-27T13:53:29.755Z

Link: CVE-2022-50804

cve-icon Vulnrichment

Updated: 2026-01-02T14:25:54.682Z

cve-icon NVD

Status : Modified

Published: 2025-12-30T23:15:47.987

Modified: 2026-01-16T19:16:12.483

Link: CVE-2022-50804

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses