PT-2023-18468 · Cs-Wmv02G · Cs-Wmv02G

Published 2023-02-14 · Updated 2024-08-02 · CVE-2023-22375

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions

Description A cross-site request forgery (CSRF) issue allows a remote unauthenticated attacker to hijack the authentication and conduct arbitrary operations by having a logged-in user view a malicious page. This issue only affects products that are no longer supported by the developer.

Recommendations Since the products are no longer supported by the developer, there is no information about a newer version that contains a fix for this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-22375

Affected Products

Cs-Wmv02G

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-22375 · Security Note
• https://t.me/cibsecurity/58057 · Telegram Post
• https://planex.co.jp/support/support_end_list.shtml · Note
• https://jvn.jp/en/jp/JVN98612206 · Note
• https://t.me/cvenotify/88500 · Telegram Post