A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. An attacker can exploit this vulnerability to trick a client into making an unintentional request to the web server, which will be treated as an authentic request. This vulnerability may lead an attacker to perform operations on behalf of the victimized user.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-58232 A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. An attacker can exploit this vulnerability to trick a client into making an unintentional request to the web server, which will be treated as an authentic request. This vulnerability may lead an attacker to perform operations on behalf of the victimized user.
Fixes

Solution

Moxa has developed appropriate solutions to address the vulnerabilities. The solutions for affected products are shown below. * ioLogik E1200 Series : Please contact Moxa Technical Support for the security patch (v3.3.7). https://www.moxa.com/tw/support/technical-support


Workaround

No workaround given by the vendor.

History

Wed, 27 Nov 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Moxa

Published:

Updated: 2024-11-27T18:28:44.244Z

Reserved: 2023-11-06T07:47:31.237Z

Link: CVE-2023-5961

cve-icon Vulnrichment

Updated: 2024-08-02T08:14:25.125Z

cve-icon NVD

Status : Modified

Published: 2023-12-23T09:15:07.730

Modified: 2024-11-21T08:42:52.213

Link: CVE-2023-5961

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.