VULNERABILITY INTELLIGENCE
CVE-2024-5676
CVSS score6.8 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2024-06-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H
Description
The Paradox IP150 Internet Module in version 1.40.00 is vulnerable to Cross-Site Request Forgery (CSRF) attacks due to a lack of countermeasures and the use of the HTTP method `GET` to introduce changes in the system.
Weakness classification
- 1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a: CWE-352