Detections
Analytics
CVE-2023-30901
high
Description
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60), POWER METER SICAM Q100 (All versions < V2.60). The web interface of the affected devices are vulnerable to Cross-Site Request Forgery attacks. By tricking an authenticated victim user to click a malicious link, an attacker could perform arbitrary actions on the device on behalf of the victim user.
References
https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-480095.pdf