ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-7698

—
CVSS 3.1
5.7 medium
EPSS
<1%p34
Published
()
Modified
Description

A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.

Vendors
phoenixcontact
Products
tc mguard rs4000 4g vzw vpn firmware, tc mguard rs4000 4g vpn firmware, tc mguard rs4000 4g att vpn firmware, tc mguard rs4000 3g vpn firmware, tc mguard rs2000 4g vzw vpn firmware, tc mguard rs2000 4g vpn firmware, tc mguard rs2000 4g att vpn firmware, tc mguard rs2000 3g vpn firmware, fl mguard smart2 vpn firmware, fl mguard smart2 firmware, fl mguard rs4004 tx\/dtx vpn firmware, fl mguard rs4004 tx\/dtx firmware
Weakness
CWE-201
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.