Description
Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users.
References (1)
Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01
Scores
CVSS v3
8.8
EPSS
0.0060
EPSS Percentile
44.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-352
Status
published
Products (2)
tollgrade/smartgrid_lighthouse_sensor_management_system
4.1.0
tollgrade/smartgrid_lighthouse_sensor_management_system
< 5.0
Published
Feb 13, 2016
Tracked Since
Feb 18, 2026