CVE-2023-38579

creationtimestamp| type| source ---|---|--- 2024-02-06 23:31:21+00:00| seen| https://t.me/ctinow/180394 2024-02-17 13:41:30+00:00| seen| https://t.me/ctinow/186919...

CVE-2023-38579 Westermo Lynx 206-F2G Cross-Site Request Forgery

The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally...

CVE-2023-38579 Westermo Lynx 206-F2G Cross-Site Request Forgery

The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally...

CVE-2023-38579

Westermo Lynx 206-F2G devices are affected by CVE-2023-38579, a Cross-Site Request Forgery (CSRF) vulnerability where the CSRF token can be predictable, enabling an attacker to craft malicious requests that a victim may trigger. Public documentation (CISA ICS advisory) confirms the vulnerability ...