Cross-Site Request Forgery (CSRF) vulnerability in TEM Opera Plus FM Family Transmitter
Vulnerability Description
The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-41987
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- CISA discovered a public Proof of Concept (PoC) as authored by Gjoko Krstic and reported it to TEM.
