CVE-2024-41987CWE-352

Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter

High · published October 3, 2024

CVSS v4.0
8.6
EPSS
0%
Percentile
14.8
In the wild
Unconfirmed
What it is

The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00245 · 14.8th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-10-03T17:38Z
EPSS history
Timeline
  • 03 OCT 17:38Z
    Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter
    cvelistv5