Cross-Site Request Forgery Vulnerability in Schneider Electric's PowerSCADA Anywhere

CVE-2017-9963

What is CVE-2017-9963?

A cross-site request forgery vulnerability exists in the Secure Gateway component of Schneider Electric's PowerSCADA Anywhere. This vulnerability allows attackers to exploit legitimate user interactions to perform unauthorized state-changing actions. To execute this attack, the attacker often employs social engineering techniques, tricking users into clicking on malicious links or accessing compromised sites, which could lead to significant security breaches.

References