CVE-2023-35120

CVE-2023-35120 covers a CSRF vulnerability in PiiGAB M-Bus (M-Bus SoftwarePack 900S). The issue allows an attacker to induce a user to click a crafted link (phishing email) while the user is authenticated, potentially causing the device to execute a GET/POST request due to the user’s cookies. Tec...