CVE-2023-5961CWE-352

ioLogik E1200 Series: Cross-Site Request Forgery (CSRF) Vulnerability

High · published December 23, 2023

CVSS v3.1
8.8
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. An attacker can exploit this vulnerability to trick a client into making an unintentional request to the web server, which will be treated as an authentic request. This vulnerability may lead an attacker to perform operations on behalf of the victimized user.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2023-12-23T09:01Z
EPSS history
Timeline
  • 23 DEC 09:01Z
    ioLogik E1200 Series: Cross-Site Request Forgery (CSRF) Vulnerability
    cvelistv5