Lucene search
HistoryJul 31, 2024 - 2:15 p.m.
CVE-2024-3083
cwe-352 csrf
remote attack
state-changing operations
administrative privileges
authenticated victims
malicious web page
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H
EPSS
0.001
Percentile
18.4%
A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated victims into visiting a malicious web page.
Affected configurations
Node
progessensor_net_connect_firmware_v2Match2.24
progessensor_net_connect_v2Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| proges | sensor_net_connect_firmware_v2 | 2.24 | cpe:2.3:o:proges:sensor_net_connect_firmware_v2:2.24:*:*:*:*:*:*:* |
| proges | sensor_net_connect_v2 | - | cpe:2.3:h:proges:sensor_net_connect_v2:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-3083
2024-07-31 14:15:07
vulnrichment
vulnrichment
CVE-2024-3083
2024-07-31 13:15:35
cvelist
cvelist
CVE-2024-3083
2024-07-31 13:15:35
CVSS3
8.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H
EPSS
0.001
Percentile
18.4%
Related for NVD:CVE-2024-3083