Description
SOCA Access Control System 180612 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without proper request validation. Attackers can craft malicious web pages that submit forged requests to create admin accounts by tricking logged-in users into visiting a malicious site.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SOCA Technology | SOCA Access Control System | 180612, 170000, 141007 | — |
References
- ExploitDB-46834 exploit
- SOCA Technology Product Homepage product
- Zero Science Lab Disclosure (ZSL-2019-5520) third-party-advisory