CVE-2024-41987 — Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter

CVE-2024-41987

Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter PUBLISHED

Description (CNA)

The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.

Affected (CNA)

Vendor / product	Versions
TEM / Opera Plus FM Family Transmitter	affected 35.45

CWE

CWE-352

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-277-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.