Beveiligingsadvies

CVE-2024-4600

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-07 11:30:09
Laatst bijgewerkt 2024-08-01 20:47:41
Toegewezen door INCIBE
CVSS-score 7.1
Status PUBLISHED

Beschrijving

Cross-Site Request Forgery vulnerability in Socomec Net Vision, version 7.20. This vulnerability could allow an attacker to trick registered users into performing critical actions, such as adding and updating accounts, due to lack of proper sanitisation of the ‘set_param.cgi’ file.