Vulnerabilities > Schneider Electric > Bmxnoe01 Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-02-04 CVE-2020-7534 Cross-Site Request Forgery (CSRF) vulnerability in Schneider-Electric products
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user is logged in.
network
low complexity
schneider-electric CWE-352
8.8