CVE-2023-38579: falha de alta gravidade em Westermo Lynx
Westermo Lynx 206-F2G Cross-Site Request Forgery
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8epss 0.2%
The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Westermo · LynxCVEs relacionadas — Westermo Lynx
No mesmo produto, das mais perigosas para as menos.
CVE-2023-45735HIGHWestermo Lynx Code InjectionEPSS 0.5%CVE-2023-45213MEDIUM Westermo Lynx Permissive Cross-domain Policy with Untrusted DomainsEPSS 0.4%CVE-2023-45222MEDIUMWestermo Lynx Cross-site ScriptingEPSS 0.3%CVE-2023-40143MEDIUMWestermo Lynx EPSS 0.3%CVE-2023-42765MEDIUMWestermo Lynx Cross-site ScriptingEPSS 0.3%CVE-2023-45227MEDIUMWestermo Lynx Cross-site ScriptingEPSS 0.3%