Lucene search

[email protected]CVE-2024-0555

HistoryJan 16, 2024 - 11:15 a.m.

CVE-2024-0555

2024-01-1611:15:08

CWE-352

[email protected]

web.nvd.nist.gov

csrf

wic1200

vulnerability

nvd

security

authentication

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.2%

JSON

A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could lead another user into executing unwanted actions inside the application they are logged in. This vulnerability is possible due to the lack of propper CSRF token implementation.

Affected configurations

Vulners

NVD

Node

full_compass_systemswic1200Range≤1.1

CPENameOperatorVersion
xantech:wic1200_firmwarexantech wic1200 firmwareeq1.1

CPE	Name	Operator	Version
xantech:wic1200_firmware	xantech wic1200 firmware	eq	1.1

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "WIC1200",
    "vendor": "Full Compass Systems",
    "versions": [
      {
        "status": "affected",
        "version": "1.1"
      }
    ]
  }
]

References

www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-full-compass-systems-wic1200

8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.2%

JSON

Related for CVE-2024-0555

cvelist1 nvd1 prion1