Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2023-38579

Westermo Lynx 206-F2G Cross-Site Request Forgery

Description

The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Westermo Lynx

Default version status: unaffected

  • L206-F2G1affected
  • 4.24affected

References