Vulnerability Details CVE-2023-38579
The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, which could be triggered by a victim unknowingly. In a successful CSRF attack, the attacker could lead the victim user to carry out an action unintentionally.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.6%
CVSS Severity
CVSS v3 Score 8.0
References
Products affected by CVE-2023-38579
-
cpe:2.3:h:westermo:l206-f2g:-
-
cpe:2.3:o:westermo:l206-f2g_firmware:4.24