CVE-2025-27454 Information

Jul 04, 2025 cve

Description

The application is vulnerable to cross-site request forgery. An attacker can trick a valid logged in user into submitting a web request that they did not intend. The request uses the victim’s browser’s saved authorization to execute the request.

Reference

https://sick.com/psirt https://sick.com/psirt https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.endress.com https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf

CNNVD-202507-269 (Published: 2025-07-03)

Share on: