CVE-2024-2741CWE-352

Cross-Site Request Forgery in Planet IGS-4215-16T2S

High · published March 21, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
12.4
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery (CSRF) vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to trick some authenticated users into performing actions in their session, such as adding or updating accounts through the Switch web interface.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.4th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-03-21T11:43Z
EPSS history
Timeline
  • 21 MAR 11:43Z
    Cross-Site Request Forgery in Planet IGS-4215-16T2S
    cvelistv5