2 lines
2.4 KiB
JSON
2 lines
2.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Net vision","vendor":"Socomec","versions":[{"status":"affected","version":"7.20"}]}],"source":"cve-coordination@incibe.es"},{"affectedData":[{"cpes":["cpe:2.3:a:socomec:net_vision:7.20:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"net_vision","vendor":"socomec","versions":[{"status":"affected","version":"7.20"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Cross-Site Request Forgery vulnerability in Socomec Net Vision, version 7.20. This vulnerability could allow an attacker to trick registered users into performing critical actions, such as adding and updating accounts, due to lack of proper sanitisation of the ‘set_param.cgi’ file."},{"lang":"es","value":"Vulnerabilidad de Cross-Site Request Forgery en Socomec Net Vision, versión 7.20. Esta vulnerabilidad podría permitir a un atacante engañar a los usuarios registrados para que realicen acciones críticas, como agregar y actualizar cuentas, debido a la falta de una desinfección adecuada del archivo 'set_param.cgi'."}],"id":"CVE-2024-4600","lastModified":"2026-06-17T08:02:14.480","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.2,"source":"cve-coordination@incibe.es","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-4600","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-05-07T15:04:56.333501Z","version":"2.0.3"}}]},"published":"2024-05-07T12:15:10.683","references":[{"source":"cve-coordination@incibe.es","url":"https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-socomec-net-vision"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-socomec-net-vision"}],"sourceIdentifier":"cve-coordination@incibe.es","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"}],"source":"cve-coordination@incibe.es","type":"Secondary"}]}
|