CVE-2024-45161

Name of the Vulnerable Software and Affected Versions Blu-Castle BCUM221E version 1.0.0P220507

Description A Cross-Site Request Forgery (CSRF) issue exists in the administrative web GUI. This can be exploited through various methods, including a crafted URL, loading an image, or using an XMLHttpRequest. Successful exploitation may lead to data exposure or unintended code execution.

Recommendations Apply a fix or update to address the CSRF issue in the administrative web GUI. As a temporary workaround, consider implementing CSRF protection mechanisms, such as synchronizer tokens, to mitigate the risk of exploitation.