CSRF in Tem Opera Plus Fm Family Transmitter
CVE-2024-41987
The TEM Opera Plus FM Family Transmitter application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.002 (15.9th percentile) — read the EPSS interpretation.
Affected products
- Tem Opera Plus Fm Family Transmitter — versions 35.45
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (government-resource)