Description
A successful CSRF attack could force the user to perform state changing requests on the application. If the victim is an administrative account, a CSRF attack could compromise the entire web application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EFACEC | BCU 500 | version 4.07 | — |
Advisories 1
- ICSA-23-353-02 EFACEC BCU 500 CISA ICS & IT advisories · Dec 19, 2023
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-02 government-resource