CVE-2025-27454: CSRF
The application is vulnerable to cross-site request forgery. An attacker can trick a valid, logged in user into submitting a web request that they did not intend. The request uses the victim's browser's saved authorization to execute the request.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27454?
CVE-2025-27454 is considered a medium severity vulnerability due to its potential to exploit user sessions.
How do I fix CVE-2025-27454?
To fix CVE-2025-27454, ensure that CSRF protections are implemented in your application, such as using anti-CSRF tokens.
What types of attacks are possible with CVE-2025-27454?
CVE-2025-27454 allows attackers to perform unauthorized actions on behalf of a valid user through cross-site request forgery.
Who is affected by CVE-2025-27454?
CVE-2025-27454 affects users of the Endress Meac300-fnade4 Firmware version 0.16.0 and below.
How can I identify if my system is vulnerable to CVE-2025-27454?
You can identify if your system is vulnerable to CVE-2025-27454 by checking the firmware version and assessing the implementation of CSRF protections.