CVE-2012-1235

Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235.
CSRF
Severity
UNKNOWN
AV:N/AC:M/Au:S/C:P/I:P/A:P
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
VendorProductVersion
advantechadvantech_webaccess
𝑥
≤ 6.0
advantechadvantech_webaccess
5.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf
http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf