A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G_3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goform_set_cmd_process.
References
| Link | Resource |
|---|---|
| https://rodelllemit.medium.com/cve-2023-33534-account-takeover-through-csrf-vulnerability-461de6f1b696 | Exploit Technical Description Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
04 Aug 2023, 15:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-352 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| First Time |
Sztozed
Sztozed zlt S10g Firmware Sztozed zlt S10g |
|
| CPE | cpe:2.3:o:sztozed:zlt_s10g_firmware:3.11.6:*:*:*:*:*:*:* cpe:2.3:h:sztozed:zlt_s10g:-:*:*:*:*:*:*:* |
|
| References | (MISC) https://rodelllemit.medium.com/cve-2023-33534-account-takeover-through-csrf-vulnerability-461de6f1b696 - Exploit, Technical Description, Third Party Advisory |
31 Jul 2023, 14:45
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-31 14:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-33534
Mitre link : CVE-2023-33534
CVE.ORG link : CVE-2023-33534
JSON object : View
Products Affected
sztozed
- zlt_s10g_firmware
- zlt_s10g
CWE
CWE-352
Cross-Site Request Forgery (CSRF)