CVE-2024-41987highCWE-352

CVE-2024-41987: fallo de gravedad alta en TEM Opera Plus FM Family Transmitter

Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter

Publicada el

Seguir esta CVE+ Monitorear Opera Plus FM Family Transmitter

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.6epss 0.2%
The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
TEM · Opera Plus FM Family Transmitter
CVEs relacionadas — TEM Opera Plus FM Family Transmitter

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-41988CRITICALMissing Authentication for Critical Function vulnerability in TEM Opera Plus FM Family TransmitterEPSS 0.6%