Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://applied-risk.com/labs/advisories | not applicable third party advisory broken link |
https://www.applied-risk.com/resources/ar-2019-006 | third party advisory |
https://www.us-cert.gov/ics/advisories/icsa-20-184-01 | third party advisory us government resource |