Security Advisory

CVE-2024-4600

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-07 11:30:09
Last updated 2024-08-01 20:47:41
Assigner INCIBE
State PUBLISHED

Description

Cross-Site Request Forgery vulnerability in Socomec Net Vision, version 7.20. This vulnerability could allow an attacker to trick registered users into performing critical actions, such as adding and updating accounts, due to lack of proper sanitisation of the ‘set_param.cgi’ file.