PT-2019-15010
CVE-2019-17217
·
Published
2019-10-06
·
Updated
2019-10-10
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
V-Zug Combi-Steam MSLQ devices versions before Ethernet R07 and before WLAN R05
Description
An issue was discovered where there is no CSRF protection established on the web service, potentially allowing for unauthorized actions.
Recommendations
For V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05, update to Ethernet R07 or WLAN R05 or later to establish CSRF protection on the web service.
Found an issue in the description? Have something to add? Feel free to write us 👾