CVE-2024-48846CWE-352

Cross Side Request Forgery, CSRF

High · published December 5, 2024

CVSS v4.0
7.1
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings.

Affected products:

ABB ASPECT - Enterprise v3.08.02;

NEXUS Series v3.08.02;

MATRIX Series v3.08.02

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:L/SA:L
EPSS
0.00642 · 50.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-12-05T12:43Z
EPSS history
Timeline
  • 05 DEC 12:43Z
    Cross Side Request Forgery, CSRF
    cvelistv5