CVE-2021-29660: CSRF
Published Apr 2, 2021
·Updated
A Cross-Site Request Forgery (CSRF) vulnerability in en/cfgsetpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker.
Affected Software
1 affected component
Softing OPC Toolbox<=4.10.1.13035
Event History
Apr 2, 2021
CVE Published
via MITRE·06:42 PM
Data Sourced
via MITRE·06:42 PM
Description
Frequently Asked Questions
1
What is CVE-2021-29660?
CVE-2021-29660 is a Cross-Site Request Forgery (CSRF) vulnerability in Softing AG OPC Toolbox that allows attackers to reset the administrative password.
2
How does CVE-2021-29660 occur?
CVE-2021-29660 occurs when the Administrator user browses a URL controlled by an attacker.
3
What is the severity of CVE-2021-29660?
CVE-2021-29660 has a severity value of 8.8 (high).
4
How can I fix CVE-2021-29660?
To fix CVE-2021-29660, it is recommended to upgrade Softing AG OPC Toolbox to version 4.10.1.13035 or higher.
5
Where can I find more information about CVE-2021-29660?
You can find more information about CVE-2021-29660 at https://www.gruppotim.it/redteam.