PT-2019-15010 · V Zug · V-Zug Combi-Steam Mslq

Published 2019-10-06 · Updated 2019-10-10 · CVE-2019-17217

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions V-Zug Combi-Steam MSLQ devices versions before Ethernet R07 and before WLAN R05

Description An issue was discovered where there is no CSRF protection established on the web service, potentially allowing for unauthorized actions.

Recommendations For V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05, update to Ethernet R07 or WLAN R05 or later to establish CSRF protection on the web service.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2019-17217

Affected Products

V-Zug Combi-Steam Mslq

References · 3

• https://osv.dev/vulnerability/CVE-2019-17217 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-17217 · Security Note
• https://vuldb.com/?id.140464 · Note