PT-2019-15010
CVE-2019-17217
·
تاريخ النشر
2019-10-06
·
تاريخ التحديث
2019-10-10
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
V-Zug Combi-Steam MSLQ devices versions before Ethernet R07 and before WLAN R05
Description
An issue was discovered where there is no CSRF protection established on the web service, potentially allowing for unauthorized actions.
Recommendations
For V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05, update to Ethernet R07 or WLAN R05 or later to establish CSRF protection on the web service.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾