Siemens SCALANCE M875 Cross-Site Request Forgery (CVE-2018-11447)

A vulnerability has been identified in SCALANCE M875 All versions. The web interface on port 443/tcp could allow a Cross-Site Request Forgery CSRF attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by an legitimate user, wh...

CVE-2018-11447

CVE-2018-11447 affects Siemens SCALANCE M875 devices. The vulnerability is a CSRF flaw in the web interface (port 443/tcp) that can allow an authenticated administrative user to interact with the interface as an administrative user when a user is lured to a malicious link. Impact described includ...