CVE-2012-1235

Advantech WebAccess 7.0 - Authenticated Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235.

References (1)

Core 1
Core References
Patch, US Government Resource x_refsource_misc
http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf

Scores

EPSS 0.0006
EPSS Percentile 19.5%

Details

CWE
CWE-352
Status published
Products (2)
advantech/advantech_webaccess 5.0
advantech/advantech_webaccess < 6.0
Published Feb 21, 2012
Tracked Since Feb 18, 2026