CVE-2024-0555CWE-352

Cross-Site Request Forgery (CSRF) vulnerability on WIC1200

Medium · published January 16, 2024

CVSS v3.1
4.6
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could lead another user into executing unwanted actions inside the application they are logged in. This vulnerability is possible due to the lack of propper CSRF token implementation.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00187 · 7.9th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-01-16T10:09Z
EPSS history
Timeline
  • 16 JAN 10:09Z
    Cross-Site Request Forgery (CSRF) vulnerability on WIC1200
    cvelistv5