CVE-2023-53961

Description

SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages that submit HTTP requests to the radio processing interface, triggering unintended administrative operations when a logged-in user visits the page.

Weakness classification

• disclosure@vulncheck.com: CWE-352

Primary references

• disclosure@vulncheck.com — Product
• disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
• disclosure@vulncheck.com — Third Party Advisory
• disclosure@vulncheck.com — Exploit, Third Party Advisory
• 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory, VDB Entry
• 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory