CVE-2022-3372

There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel, being able to modify different parameters that are critical for industrial operations.

Score

CVSS 3.1 8.8 High

Status

Modified - cve-coordination@incibe.es

Published

2023-06-21

Last modified

2024-12-06

Weaknesses

CWE-352

Affected products

• Netman 204 (Riello-ups)
• Netman 204 Firmware (Riello-ups)
• Netman-204 (Riello Ups)

References

• https://www.incibe.es/en/incibe-cert/notices/aviso-sci/cross-site-request-forgery-csrf-riello-ups-netman-204