CVE-2024-3083 — Plug&Track / Sensor Net Connect V2

CVE-2024-3083

Plug&Track / Sensor Net Connect V2 PUBLISHED

Description (CNA)

A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated victims into visiting a malicious web page.

Affected (CNA)

Vendor / product	Versions
Plug&Track / Sensor Net Connect V2	affected 2.24

CWE

CWE-352

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-3083

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.