NetSight
medium5.7

CVE-2024-7698

A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.

Impact

A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.

Affected products

VendorProductAffected versions
PhoenixcontactTc Mguard Rs4000 4g Vzw Vpn Firmware
before 8.9.3
PhoenixcontactTc Mguard Rs4000 4g Vpn Firmware
before 8.9.3
PhoenixcontactTc Mguard Rs4000 4g Att Vpn Firmware
before 8.9.3
PhoenixcontactTc Mguard Rs4000 3g Vpn Firmware
before 8.9.3
PhoenixcontactTc Mguard Rs2000 4g Vzw Vpn Firmware
before 8.9.3
PhoenixcontactTc Mguard Rs2000 4g Vpn Firmware
before 8.9.3
PhoenixcontactTc Mguard Rs2000 4g Att Vpn Firmware
before 8.9.3
PhoenixcontactTc Mguard Rs2000 3g Vpn Firmware
before 8.9.3
PhoenixcontactFl Mguard Smart2 Vpn Firmware
before 8.9.3
PhoenixcontactFl Mguard Smart2 Firmware
before 8.9.3
PhoenixcontactFl Mguard Rs4004 Tx\/Dtx Vpn Firmware
before 8.9.3
PhoenixcontactFl Mguard Rs4004 Tx\/Dtx Firmware
before 8.9.3

Weakness classification

References