PT-2022-21971 · Unknown · Lorawan Network Server+1

Bhaskar Tejaswi · Published 2022-10-13 · Updated 2025-05-16 · CVE-2022-34020

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ResIOT IOT Platform + LoRaWAN Network Server versions through 4.1.1000114

Description A Cross Site Request Forgery (CSRF) issue allows attackers to add new admin users to the platform or cause other unspecified impacts. This can be achieved by exploiting the vulnerability in the affected software, potentially leading to unauthorized access and modifications.

Recommendations For versions through 4.1.1000114, update to a version that includes a fix for this issue to prevent CSRF attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-34020

Affected Products

Lorawan Network Server

Resiot Iot Platform

References · 7

• 🔥 https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html · Exploit
• 🔥 https://securityblog101.blogspot.com/2022/09/cve-2022-34020.html · Exploit
• https://osv.dev/vulnerability/CVE-2022-34020 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34020 · Security Note
• https://t.me/cibsecurity/51309 · Telegram Post
• https://t.me/cvenotify/37076 · Telegram Post
• https://t.me/cvenotify/122543 · Telegram Post