CVE-2015-2848 in Tuxedo Touch

Resumen (Inglés)

Cross-site request forgery (CSRF) vulnerability in Honeywell Tuxedo Touch before 5.2.19.0_VA allows remote attackers to hijack the authentication of arbitrary users for requests associated with home-automation commands, as demonstrated by a door-unlock command.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2015-04-03

Divulgación

2015-07-26

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
76809	Honeywell Tuxedo Touch Home-Automation falsificación de solicitudes en sitios cruzados	352	No está definido	Arreglo oficial	CVE-2015-2848

Fuentes

• MITRE
• NVD
• CVE Details