CVE-2017-12703

Description

A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The application does not verify whether a request was intentionally provided by the user, making it possible for an attacker to trick a user into making a malicious request to the server.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://www.securityfocus.com/bid/100470
• https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01
• http://www.securityfocus.com/bid/100470
• https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01

CWEs

CWE-352

💬 Discuss CVE-2017-12703 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.