Description
An unauthenticated remote attacker can deceive users into performing unintended actions due to improper restriction of rendered UI layers or frames.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Welotec | SMART EMS | < 3.1.4 | 3.1.4 |
| Welotec | VPN Security Suite | < 3.1.4 | 3.1.4 |
Advisories 1
- VDE-2024-023 Welotec: Clickjacking Vulnerability in WebUI CERT@VDE · Apr 23, 2024