Cross-Site Request Forgery Vulnerability in Socomec DIRIS Digiware Product

CVE-2024-53684

What is CVE-2024-53684?

A cross-site request forgery vulnerability exists within the WEBVIEW-M functionality of the Socomec DIRIS Digiware M-70 version 1.6.9. This flaw can be exploited through a maliciously crafted HTTP request, allowing attackers to perform unauthorized actions. By crafting a deceptive webpage, attackers can trigger this vulnerability, potentially compromising user access and control over the impacted product.

References