PT-2024-15654 · Wic1200 · Wic1200

·

CVE-2024-0555

·

Published

2024-01-16

·

Updated

2024-01-23

CVSS v3.1

8.0

High

VectorAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WIC1200 version 1.1
Description A Cross-Site Request Forgery (CSRF) vulnerability has been found, allowing an authenticated user to lead another user into executing unwanted actions inside the application they are logged in. This is due to the lack of proper CSRF token implementation.
Recommendations For version 1.1, consider implementing a proper CSRF token to prevent unauthorized actions. As a temporary workaround, restrict access to sensitive features within the application to minimize the risk of exploitation.

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-0555

Affected Products

Wic1200