CSRF in Fsi Fs020w
CVE-2022-43470
Cross-site request forgery (CSRF) vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software versions v4.0.0 and earlier, +F FS030W software versions v3.3.5 and earlier, and +F FS040W software versions v1.4.1 and earlier allows an adjacent attacker to hijack the authentication of an administrator and user's unintended operations such as to reboot the product and/or reset the configuration to the initial set-up may be performed.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.002 (13.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H.
Affected products
- Fsi Fs020w
- Fsi Fs020w_firmware
- Fsi Fs030w
- Fsi Fs030w_firmware
- Fsi Fs040u
- Fsi Fs040u_firmware
- Fsi Fs040w
- Fsi Fs040w_firmware
- Fuji Soft Incorporated +f Fs040u, Fs020w, Fs030w, And Fs040w — versions +F FS040U software versions v2.3.4 and earlier, +F FS020W software versions v4.0.0 and earlier, +F FS030W software versions v3.3.5 and earlier, and +F FS040W software versions v1.4.1 and earlier
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (Vendor Advisory)
- vultures@jpcert.or.jp (Vendor Advisory)
- vultures@jpcert.or.jp (Vendor Advisory)
- vultures@jpcert.or.jp (Vendor Advisory)
- vultures@jpcert.or.jp (Third Party Advisory)
Frequently asked questions
- What is CVE-2022-43470?
- CVE-2022-43470 is a high-severity vulnerability in Fsi Fs020w, classified under Cross-Site Request Forgery (CSRF). CVSS score: 7.3/10. Published 2022-12-05.
- How severe is CVE-2022-43470?
- High severity. CVSS v3 base score is 7.3 out of 10.