CVE-2016-5809 Cross-site request forgery in Schneider Electric IONXXXX Series
Attackers can perform unauthorized configuration changes on Schneider Electric power meters due to missing CSRF tokens.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2016-5809?
CVE-2016-5809 is a high-severity vulnerability in Schneider Electric IONXXXX Series, published on 13 Feb 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An issue was discovered on Schneider Electric IONXXXX series power meters ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, and PM5XXX series. There is no CSRF Token generated to authenticate the user during a session. Successful exploitation of this vulnerability can allow unauthorized configuration changes to be made and saved.
Weakness: CWE-352
Which versions are affected by CVE-2016-5809?
It affects 6 products.
Products include Schneider-Electric Ion5000, Schneider-Electric Ion7300, Schneider-Electric Ion7500, Schneider-Electric Ion7600, Schneider-Electric Ion8650, Schneider-Electric Ion8800.
How do I fix CVE-2016-5809?
No fix has been published for CVE-2016-5809 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5809 being exploited?
There is no known exploitation of CVE-2016-5809 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Schneider Electric IONXXXX Series
Sources
Also known as GHSA-rrvq-67jw-2vxq.