Cross site request forgery (csrf)

2023-05-2222:15:00

PRIOn knowledge base

www.prio-n.com

cross site request forgery

security vulnerability

code execution

file upload

nvd

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.8%

The affected products have a CSRF vulnerability that could allow an attacker to execute code and upload malicious files.

CPENameOperatorVersion
4k_quad_firmwareeq4.5.181
4k_quad_firmwareeq4.5.196
a300_firmwareeq3.4
mini_firmwareeq2.6.2
studio_r3_firmwareeq3.6.4

Name	Operator	Version
4k_quad_firmware	eq	4.5.181
4k_quad_firmware	eq	4.5.196
a300_firmware	eq	3.4
mini_firmware	eq	2.6.2
studio_r3_firmware	eq	3.6.4

References

birddog.tv/downloads/

www.cisa.gov/news-events/ics-advisories/icsa-23-131-11