CVE-2017-5145
CriticalSummary
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY (CSRF) vulnerability can allow execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized changes in the device configuration, potentially impacting its security and operational integrity within the network.
Recommendation
It is recommended to update the device firmware to the latest versions to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Successful exploitation of this CROSS-SITE REQUEST FORGERY (CSRF) vulnerability can allow execution of unauthorized actions on the device such as configuration parameter changes, and saving modified configuration.