Description
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. There is no CSRF Token generated per page and/or per (sensitive) function. Successful exploitation of this vulnerability can allow silent execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | BINOM3 Electric Power Quality Meter | BINOM3 Electric Power Quality Meter | — |
Advisories 1
- ICSA-17-031-01A BINOM3 Electric Power Quality Meter (Update A) CISA ICS & IT advisories · Feb 7, 2017