CVE-2016-5789

A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.

Score

CVSS 3.0 8.0 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-10-13

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Jtc-200 Firmware (Jantek)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-17-283-02