Vulnerability Description
There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker to access the administrator panel, being able to modify different parameters that are critical for industrial operations.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Riello-Ups | Netman 204 Firmware | 02.05 |
| Riello-Ups | Netman 204 | - |
Related Weaknesses (CWE)
References
- https://www.incibe.es/en/incibe-cert/notices/aviso-sci/cross-site-request-forgerThird Party Advisory
- https://www.incibe.es/en/incibe-cert/notices/aviso-sci/cross-site-request-forgerThird Party Advisory
FAQ
What is CVE-2022-3372?
CVE-2022-3372 is a vulnerability with a CVSS score of 8.8 (HIGH). There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the C...
How severe is CVE-2022-3372?
CVE-2022-3372 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-3372?
Check the references section above for vendor advisories and patch information. Affected products include: Riello-Ups Netman 204 Firmware, Riello-Ups Netman 204.