Cross-Site Request Forgery vulnerability in Socomec Net Vision

CVE-2024-4600

What is CVE-2024-4600?

A Cross-Site Request Forgery (CSRF) vulnerability exists in Socomec's Net Vision, specifically in version 7.20. This security flaw enables attackers to exploit the absence of adequate sanitization processes for the 'set_param.cgi' file. By misleading authenticated users, an attacker could induce them to execute critical operations such as adding or updating accounts. This compromises account security and integrity, necessitating immediate mitigation measures to protect user data and maintain operational security.

References