CVE-2024-4600CWE-352

Cross-Site Request Forgery vulnerability in Socomec Net Vision

High · published May 7, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
4.0
In the wild
Unconfirmed
What it is

Cross-Site Request Forgery vulnerability in Socomec Net Vision, version 7.20. This vulnerability could allow an attacker to trick registered users into performing critical actions, such as adding and updating accounts, due to lack of proper sanitisation of the ‘set_param.cgi’ file.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00152 · 4.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-05-07T11:30Z
EPSS history
Timeline
  • 07 MAY 11:30Z
    Cross-Site Request Forgery vulnerability in Socomec Net Vision
    cvelistv5