MEDIUM🇵🇱 Wersja polska

CVE-2024-0555

CVSS 4.6v3.1pub. 2024-01-16upd. 2024-11-21

A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could lead another user into executing unwanted actions inside the application they are logged in. This vulnerability is possible due to the lack of propper CSRF token implementation.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

  • Xantech Wic1200

    HW
    Xantech
    wszystkie wersje

  • Xantech Wic1200 Firmware

    OS
    Xantech
    1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-0556HIGH7.1ten sam produkt

A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulner...

CVE-2024-0554MEDIUM5.5ten sam produkt

A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated ...