CVE-2021-29660

A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the…

published April 2, 2021

CVSS
—
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.7th percentile
Published
2021-04-02T18:42Z
EPSS history
Timeline
  • 02 APR 18:42Z
    A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the…
    cvelistv5