CVE-2023-33534

2023-07-3100:00:00

mitre

www.cve.org

cross-site request forgery

guanzhou tozed kangwei

zlts10g

s10g_3.11.6

user accounts takeover

crafted post request

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

35.3%

JSON

A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G_3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goform_set_cmd_process.

References

rodelllemit.medium.com/cve-2023-33534-account-takeover-through-csrf-vulnerability-461de6f1b696