SB2016101808 - Cross-site request forgery in Moxa ioLogik
Published: October 18, 2016
Security Bulletin ID
SB2016101808
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Cross-site request forgery (CVE-ID: CVE-2016-8350)
The vulnerability allows a remote unauthenticated user to perform cross-site request forgery attack on the target system.The weakness is due to improper request verification that allows attackers to conduct CSRF attack.
Successful exploitation of the vulnerability may result in full vulnerable system compromise.
Remediation
Install update from vendor's website.