Aviotec Firmware

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-23849 Aug 05, 20:15 HIGH This Week

A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Cpp6 Firmware Cpp7 Firmware Cpp7 3 Firmware Cpp4 Firmware +4

NVD

CVSS 3.1

8.8

EPSS

0.5%

CVE-2021-23849

EPSS 0% CVSS 8.8

HIGH This Week

A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Cpp6 Firmware Cpp7 Firmware +6

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy