What is CVE-2019-13071?

CVE-2019-13071 is a high-severity vulnerability in Cyberpowersystems Powerpanel, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2019-07-10.

How severe is CVE-2019-13071?

High severity. CVSS v3 base score is 8.8 out of 10.

CSRF in Cyberpowersystems Powerpanel

CVE-2019-13071

CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.007 (51.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Cyberpowersystems Powerpanel — versions 3.4.0
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC, Mailing List, Third Party Advisory)
cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-13071?: CVE-2019-13071 is a high-severity vulnerability in Cyberpowersystems Powerpanel, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2019-07-10.
How severe is CVE-2019-13071?: High severity. CVSS v3 base score is 8.8 out of 10.