CVE-2024-1889 in Cluster Controller

Riassunto

di MITRE • 26/02/2024

Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability could allow an attacker to send a malicious link to an authenticated user to perform actions with these user permissions on the affected device.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 26/02/2024
• Divulgazione: 26/02/2024
• Moderazione: accettato
• Voce: VDB-254746
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 8.8 (CNA)
• EPSS: 0.00305
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-1889
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-1889
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-1889/