Skip to content
OpenAdvisories
High · 8.8 CVE-2024-1889 EUVD-2024-17612GHSA-rg8h-4g25-hj75

Cross-Site Request Forgery vulnerability in SMA Cluster Controller

Published Feb 26, 2024 · Updated Aug 1, 2024 · Assigned by INCIBE

Description

Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability could allow an attacker to send a malicious link to an authenticated user to perform actions with these user permissions on the affected device.

Affected products

VendorProductAffectedFixed
SMA SMA Cluster Controller 01.05.01.R —

Advisories 1

References