CVE-2022-32516CWE-352

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product…

High · published January 30, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product suffers from POST-Based Cross-Site Request Forgery (CSRF). Affected Products: Conext™ ComBox (All Versions)

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2023-01-30T00:00Z
EPSS history
Timeline
  • 30 JAN 00:00Z
    A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and cause a reboot loop when the product…
    cvelistv5