CVE-2012-0235

EUVD-2012-0271
Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Affected Products (NVD)
VendorProductVersion
advantechadvantech_webaccess
𝑥
≤ 6.0
advantechadvantech_webaccess
5.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/52051
http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf
http://www.securityfocus.com/bid/52051
http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf