Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2024-3083

A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated vict

Description

A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated victims into visiting a malicious web page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Plug&Track Sensor Net Connect V2

Default version status: unknown

  • 2.24affected

References