CVE-2016-5789 A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions with the same permissions as a victim user, provided the victim has an active sessi...
HighCVSS 8.0
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. An attacker could perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jantek jtc-200 firmware | All versions | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource