PT-2024-18396
CVE-2024-1889
·
تاريخ النشر
2024-02-26
·
تاريخ التحديث
2025-03-11
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SMA Cluster Controller version 01.05.01.R
Description
The issue is a Cross-Site Request Forgery vulnerability that could allow an attacker to send a malicious link to an authenticated user, enabling the attacker to perform actions with the user's permissions on the affected device.
Recommendations
For SMA Cluster Controller version 01.05.01.R, consider implementing additional security measures to prevent Cross-Site Request Forgery attacks, such as validating user requests and ensuring that all user interactions are authenticated and authorized.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾