EUVD-2026-63222
GHSA-hcc2-q42w-v7pc
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network vector for web-accessible interface; PR:L per 'low privileged attacker' description; UI:R as victim must visit malicious page; scope unchanged as impact stays within FDS application boundary.
Primary rating from Vendor (CERTVDE).
CVSS VectorVendor: CERTVDE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
An low privileged remote attacker can cause authenticated users to perform unintended actions in the FDS Web interface using malicious web pages.
AnalysisAI
CSRF in the Frauscher FDS 102 web interface (versions 2.0.0 through 2.13.3) allows a low-privileged remote attacker to coerce authenticated users into executing unintended actions by directing them to a crafted malicious web page. The CVSS 4.0 score of 8.6 reflects high confidentiality, integrity, and availability impact against the vulnerable system, driven by the absence of complexity requirements and the low privilege bar for the attacker. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attack requires three concurrent conditions: first, the victim must hold an active authenticated session to the FDS 102 web interface (the CVSS 4.0 PR:L metric also indicates the attacker requires low-privileged standing, though the exact nature of that privilege is not specified in available data); second, the victim must be induced to visit an attacker-controlled web page while their FDS 102 session remains active (UI:P - requires user interaction, the primary limiting factor for mass exploitation); third, the FDS 102 web interface must be network-reachable from the victim's browser (AV:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) indicates a network-reachable attack with low complexity, no attack requirements, low attacker privileges, and a single user interaction (the victim visiting a malicious page). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with low-privileged network presence crafts a malicious HTML page containing a hidden cross-origin form or JavaScript fetch that submits a state-changing request to the FDS 102 web interface. The attacker delivers a link to this page - via phishing email, compromised intranet resource, or injected content - to an FDS 102 operator who is currently authenticated. … |
| Remediation | Consult the CERTVDE advisory VDE-2026-078 at https://www.certvde.com/en/advisories/VDE-2026-078/ for vendor-issued guidance; an exact patched release version is not confirmed from the available intelligence data, so the advisory should be treated as the authoritative source for upgrade targets. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Frauscher FDS 102 systems in service (versions 2.0.0-2.13.3) and document their operational criticality; immediately restrict web interface access to trusted networks only using firewall rules or network segmentation. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Session fixation/expiration weakness in the Frauscher Sensortechnik FDS 102 web interface (versions 2.1.0 through 2.13.3
Unauthenticated file disclosure in the Frauscher FDS 102 Field Detection System web interface exposes sensitive railway
Session hijacking in Frauscher Sensortechnik FDS 102 versions 2.13.0 through 2.13.3 allows a remote attacker with a low-
Zip-slip path traversal in Frauscher FDS 102 enables a high-privileged remote attacker to overwrite arbitrary files on t
Remote code execution is achievable on the Frauscher FDS 102 field data server when a high-privileged attacker uploads a
Privilege escalation in Frauscher FDS 102 (versions 2.11.0 through 2.13.3) allows a low-privileged authenticated attacke
User enumeration in the Frauscher FDS 102 railway diagnostic system allows low-privileged remote attackers to retrieve t
Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today