Skip to content
OpenAdvisories

Description

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed.

Affected products

VendorProductAffectedFixed
Contec FXA5000 < 1.12.00 1.12.00
Contec FXA5020 < 1.12.00 1.12.00
Contec FXA5020-[][] < 1.12.00 1.12.00
Contec FXE5000 < 1.12.00 1.12.00
Contec FXE5000-[][] < 1.12.00 1.12.00
Contec FXS5000-[][] < 1.12.00 1.12.00
Contec FXS5021 < 1.12.00 1.12.00
Contec FXE4000 < 1.14.00 1.14.00
Contec FXE4000-WP < 1.14.00 1.14.00
Contec FXS4000 < 1.14.00 1.14.00
Contec FXS4020 < 1.14.00 1.14.00
Contec FXA3000 < 1.20.00 1.20.00
Contec FXA3000-[][] < 1.20.00 1.20.00
Contec FXA3020 < 1.20.00 1.20.00
Contec FXA3020-[][] < 1.20.00 1.20.00
Contec FXA3200 < 1.20.00 1.20.00
Contec FXE3000 < 1.20.00 1.20.00
Contec FXE3000-[][] < 1.20.00 1.20.00
Contec FXE3000-WP < 1.20.00 1.20.00
Contec FXS300[]-CN < 1.20.00 1.20.00
Contec SGA1000 < 1.02 1.02
Contec RP-WAH-SR1 < 1.03 1.03
Contec RP-WAH-SR2 < 1.03 1.03
Contec RP-WAH-SR12 < 1.02 1.02
Contec RP-WAH-SR22 < 1.02 1.02
Contec ECE1000 < 1.02 1.02
Contec ECE1020 < 1.02 1.02
Contec ECS1020 < 1.02 1.02
Contec Remote I/O Coupler Unit (Server Type) CPSN-MCB271-* < 1.82 1.82
Contec Remote I/O Coupler Unit (EtherNet/IP Adapter) CPSN-EOB471EI-[]1 < 1.02 1.02
Contec Programmable Remote I/O Coupler Unit (Software PLC Type) CPSN-PCB271-S1-041 < 1.61 1.61
Contec PC-HELPER Wireless I/O DIO-0404RY-LWF < 1.01.00 1.01.00
Contec PC-HELPER Wireless I/O DIO-0404RY-LWF-US < 1.01.00 1.01.00

References