Cross site request forgery (csrf)

2019-10-0616:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.7%

JSON

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. There is no CSRF protection established on the web service.

CPENameOperatorVersion
combi-stream_mslq_firmwareeq< ethernet-r7
combi-stream_mslq_firmwareeq< wlan-r5

CPE	Name	Operator	Version
	combi-stream_mslq_firmware	eq	< ethernet-r7
	combi-stream_mslq_firmware	eq	< wlan-r5

References

vuldb.com/?id.140464