GHSA-qxv4-rrm3-v6px

Опубликовано: 13 июн. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 4.3

Описание

A vulnerability has been identified in POWER METER SICAM Q200 family (All versions < V2.70). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user.

Ссылки

EPSS

Процентиль: 35%

0.00145

Низкий

4.3 Medium

CVSS3

CVE ID

CVE-2023-30901

Дефекты

CWE-352

Связанные уязвимости

CVE-2023-30901

CVSS3: 4.3

nvd

больше 2 лет назад

A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA02-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA11-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA12-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-0AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA31-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA32-0AA0) (All versions < V3.11), SICAM P85

BDU:2023-03541

CVSS3: 4.3

fstec

больше 2 лет назад

Уязвимость веб-интерфейса управления многофункциональных измерительных устройств Siemens SICAM Q200, позволяющая нарушителю выполнить произвольные действия

EPSS

Процентиль: 35%

0.00145

Низкий

4.3 Medium

CVSS3

CVE ID

CVE-2023-30901

Дефекты

CWE-352