CVE-2024-3083

A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated victims into visiting a malicious web page.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:proges:sensor_net_connect_firmware_v2:2.24:*:*:*:*:*:*:*
cpe:2.3:h:proges:sensor_net_connect_v2:-:*:*:*:*:*:*:*

History

12 Aug 2024, 18:35

Type Values Removed Values Added
First Time Proges sensor Net Connect Firmware V2
Proges
Proges sensor Net Connect V2
References () https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-3083 - () https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-3083 - Vendor Advisory
CPE cpe:2.3:o:proges:sensor_net_connect_firmware_v2:2.24:*:*:*:*:*:*:*
cpe:2.3:h:proges:sensor_net_connect_v2:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 6.6
v2 : unknown
v3 : 8.3

01 Aug 2024, 12:42

Type Values Removed Values Added
Summary
  • (es) Atacantes remotos pueden explotar un “CWE-352: Cross-Site Request Forgery (CSRF)” para realizar operaciones de cambio de estado con privilegios administrativos al atraer a víctimas autenticadas para que visiten una página web maliciosa.

31 Jul 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-31 14:15

Updated : 2024-09-30 14:15


NVD link : CVE-2024-3083

Mitre link : CVE-2024-3083

CVE.ORG link : CVE-2024-3083


JSON object : View

Products Affected

proges

  • sensor_net_connect_v2
  • sensor_net_connect_firmware_v2
CWE
CWE-352

Cross-Site Request Forgery (CSRF)