PT-2019-15010
CVE-2019-17217
·
Publicado
2019-10-06
·
Atualizado
2019-10-10
Descrição por
CVSS 3.1
8.8
AltaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
V-Zug Combi-Steam MSLQ devices versions before Ethernet R07 and before WLAN R05
Description
An issue was discovered where there is no CSRF protection established on the web service, potentially allowing for unauthorized actions.
Recommendations
For V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05, update to Ethernet R07 or WLAN R05 or later to establish CSRF protection on the web service.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾