high8.8
CVE-2024-1889
Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R.
Impact
Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability could allow an attacker to send a malicious link to an authenticated user to perform actions with these user permissions on the affected device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sma | Clcon-10 Firmware | Version 01.05.01.r |
| Sma | Clcon-S-10 Firmware | Version 01.05.01.r |