Ercom Cryptobox Cross-Site Request Forgery Vulnerability in Administration Console

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Ercom Cryptobox administration console. This vulnerability allows an attacker to perform actions on behalf of a Cryptobox administrator. The exploitation requires the administrator to visit a malicious website or click a link while logged into the administration console.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed in the Cryptobox administration console, potentially allowing an attacker to manipulate settings or data within the application.

Remediation

Users can upgrade to Cryptobox version 4.39.194 or later, where this vulnerability has been addressed.