CVE-2019-13529: CSRF

First published: Wed Oct 09 2019(Updated: )

An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which would increase the ease of exploitation.

Credit: ics-cert@hq.dhs.gov

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/references
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/severity
• agent/weakness
• agent/last-modified-date
• agent/author
• agent/first-publish-date
• agent/description
• agent/event
• agent/source
• agent/tags
• collector/nvd-index
• agent/software-canonical-lookup-request
• vendor/sma
• canonical/sma sunny webbox firmware
• version/sma sunny webbox firmware/1.6
• canonical/sma sunny webbox