PT-2024-18396

CVE-2024-1889

·

تاريخ النشر

2024-02-26

·

تاريخ التحديث

2025-03-11

الوصف من

CVSS 3.1
8.8
عالية
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SMA Cluster Controller version 01.05.01.R
Description The issue is a Cross-Site Request Forgery vulnerability that could allow an attacker to send a malicious link to an authenticated user, enabling the attacker to perform actions with the user's permissions on the affected device.
Recommendations For SMA Cluster Controller version 01.05.01.R, consider implementing additional security measures to prevent Cross-Site Request Forgery attacks, such as validating user requests and ensuring that all user interactions are authenticated and authorized. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾