Firmware V300SP10260209 and earlier for the Binardat 10G08-0800GSM switch lack protections against CSRF for state‑changing administrative actions. An attacker who can lure an authenticated administrator into visiting a malicious link can force the device to apply configuration changes. The weakness is classified as CWE‑352 and results in unauthorized modification of switch settings, which can affect availability and integrity of network traffic.

Binardat Ltd. 10G08-0800GSM Network Switch, firmware version V300SP10260209 and earlier are affected.

The CVSS score of 5.1 indicates a moderate severity, while the EPSS score of less than 1 % reflects a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires the attacker to obtain administrator credentials or rely on social engineering to trick an authenticated administrator into executing a crafted request. Consequently, the risk is moderate but the likelihood of widespread exploitation remains low unless a targeted threat actor focuses on the affected device.