Lucene search
HistoryDec 13, 2023 - 2:15 a.m.
CVE-2023-47578
cve-2023-47578
relyum
rely-pcie
rely-rec
csrf
cross site request forgery
nvd
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
24.3%
Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF protection in the web interface.
Affected configurations
Node
relyumrely-pcie_firmwareMatch22.2.1
relyumrely-pcieMatch-
Node
relyumrely-rec_firmwareMatch23.1.0
relyumrely-recMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| relyum:rely-pcie_firmware | relyum rely-pcie firmware | eq | 22.2.1 |
Related
cvelist
cvelist
CVE-2023-47578
2023-12-13 00:00:00
nvd
nvd
CVE-2023-47578
2023-12-13 02:15:07
prion
prion
Cross site request forgery (csrf)
2023-12-13 02:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
24.3%
Related for CVE-2023-47578