CVE-2017-7969

CVE-2017-7969 is a CSRF vulnerability in the Secure Gateway component of Schneider Electric’s PowerSCADA Anywhere v1.0 (bundled with PowerSCADA Expert v8.1/8.2) and Citect Anywhere v1.0. The root cause is cross-site request forgery enabling multiple state-changing requests when a user is tricked ...