1. Home
  2. CVE Database
  3. CVE-2024-3083
HIGH · 8.3

CVE-2024-3083

A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated victims into visiting a ...

Vulnerability Description

A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated victims into visiting a malicious web page.

CVSS Score

8.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ProgesSensor Net Connect Firmware V22.24
ProgesSensor Net Connect V2-

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2024-3083?

CVE-2024-3083 is a vulnerability with a CVSS score of 8.3 (HIGH). A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated victims into visiting a ...

How severe is CVE-2024-3083?

CVE-2024-3083 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-3083?

Check the references section above for vendor advisories and patch information. Affected products include: Proges Sensor Net Connect Firmware V2, Proges Sensor Net Connect V2.