CVE-2018-25150: Ecessa Corporation Ecessa Shieldlink SL175EHQ

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Ecessa ShieldLink SL175EHQ 10.7.4 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can craft a malicious web page with a hidden form to add a superuser account by tricking a logged-in administrator into loading the page.

Affected products

• Ecessa Corporation Ecessa Shieldlink SL175EHQ: version 10.7.4 only

Published 2025-12-24. Last modified 2026-06-17.