PT-2022-12040

CVE-2021-44312

·

Published

2022-03-30

·

Updated

2022-04-08

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firmware Analysis and Comparison Tool version 3.2
Description An issue allows logged in administrators to be targeted by a CSRF attack through visiting a crafted web page.
Recommendations For Firmware Analysis and Comparison Tool version 3.2, consider implementing CSRF protection measures, such as token-based validation, to prevent exploitation. As a temporary workaround, restrict access to the web interface for logged-in administrators until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾