Lucene search

[email protected]NVD:CVE-2023-47578

HistoryDec 13, 2023 - 2:15 a.m.

CVE-2023-47578

2023-12-1302:15:07

CWE-352

[email protected]

web.nvd.nist.gov

relyum

rely-pcie

rely-rec

csrf

vulnerability

web interface

security

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

24.1%

JSON

Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to the absence of CSRF protection in the web interface.

Affected configurations

Nvd

Node

relyumrely-pcie_firmwareMatch22.2.1

AND

relyumrely-pcieMatch-

Node

relyumrely-rec_firmwareMatch23.1.0

AND

relyumrely-recMatch-

VendorProductVersionCPE
relyumrely-pcie_firmware22.2.1cpe:2.3:o:relyum:rely-pcie_firmware:22.2.1:*:*:*:*:*:*:*
relyumrely-pcie-cpe:2.3:h:relyum:rely-pcie:-:*:*:*:*:*:*:*
relyumrely-rec_firmware23.1.0cpe:2.3:o:relyum:rely-rec_firmware:23.1.0:*:*:*:*:*:*:*
relyumrely-rec-cpe:2.3:h:relyum:rely-rec:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
relyum	rely-pcie_firmware	22.2.1	cpe:2.3:o:relyum:rely-pcie_firmware:22.2.1:::::::*
relyum	rely-pcie	-	cpe:2.3:h:relyum:rely-pcie:-:::::::*
relyum	rely-rec_firmware	23.1.0	cpe:2.3:o:relyum:rely-rec_firmware:23.1.0:::::::*
relyum	rely-rec	-	cpe:2.3:h:relyum:rely-rec:-:::::::*

References

www.relyum.com/web/support/vulnerability-report/

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

24.1%

JSON

Related for NVD:CVE-2023-47578

cvelist1 cve1 prion1