Description
Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
References (2)
Core 2
Core References
Patch, US Government Resource x_refsource_misc
http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/52051
Scores
EPSS
0.0007
EPSS Percentile
21.1%
Details
CWE
CWE-352
Status
published
Products (2)
advantech/advantech_webaccess
5.0
advantech/advantech_webaccess
< 6.0
Published
Feb 21, 2012
Tracked Since
Feb 18, 2026