medium5.3
CVE-2019-25244
Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request …
Impact
Legrand BTicino Driver Manager F454 1.0.51 contains multiple web vulnerabilities that allow attackers to perform administrative actions without proper request validation. Attackers can exploit cross-site request forgery to change passwords and inject stored cross-site scripting payloads through unvalidated GET parameters.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://www.bticino.com
- https://www.exploit-db.com/exploits/46850
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5521.php
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5522.php
- https://www.exploit-db.com/exploits/46850
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5521.php
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5522.php