CVE-2016-4504

2017-03-2116:00:00

icscert

www.cve.org

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.2%

JSON

A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB’log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions. There is no CSRF Token generated per page or per function.

CNA Affected

[
  {
    "product": "Meteocontrol WEB'log",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Meteocontrol WEB'log"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-16-133-01