Lucene search

CERTVDEVULNRICHMENT:CVE-2024-7698

HistorySep 10, 2024 - 8:42 a.m.

CVE-2024-7698 Phoenix Contact: Access to CSRF tokens of higher privileged users in MGUARD products

2024-09-1008:42:42

CWE-212

CERTVDE

github.com

cve-2024-7698

phoenix contact

csrf tokens

mguard products

remote attacker

csrf attacks

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

18.9%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.

References

cert.vde.com/en/advisories/VDE-2024-039

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

18.9%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2024-7698