Skip to content
OpenAdvisories
Medium · 4.6 CVE-2024-0555 EUVD-2024-16348GHSA-vvp5-2ffm-gmvh

Cross-Site Request Forgery (CSRF) vulnerability on WIC1200

Published Jan 16, 2024 · Updated Jun 17, 2025 · Assigned by INCIBE

Description

A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could lead another user into executing unwanted actions inside the application they are logged in. This vulnerability is possible due to the lack of propper CSRF token implementation.

Affected products

VendorProductAffectedFixed
Full Compass Systems WIC1200 1.1 —

References