What is CVE-2024-45504?

CVE-2024-45504 is a medium-severity vulnerability in Alps System Integration Co., Ltd. Intersafe Cats, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.5/10. Published 2024-09-10.

How severe is CVE-2024-45504?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2024-45504 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Alps System Integration Co., Ltd. Intersafe Cats

CVE-2024-45504

Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow a remote unauthenticated attacker to hijack the authentication of the user and to perform unintended operations if the…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.003 (21.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

Alps System Integration Co., Ltd. Intersafe Cats — versions versions before 2024 July 4 maintenance
Alps System Integration Co., Ltd. Intersafe Gatewayconnection — versions versions before 2024 July 20 maintenance
Alps System Integration Co., Ltd. Intersafe Logdirector — versions versions before the replacement file released on 2024 September 9
Alps System Integration Co., Ltd. Intersafe Lognavigator — versions prior to Ver.1.1.1
Alps System Integration Co., Ltd. Intersafe Mobilesecurity — versions versions before 2024 August 31 maintenance
Alps System Integration Co., Ltd. Intersafe Webfilter — versions prior to V9.1SP4 Build1653
Axseed,inc. Sppm Bizbrowser — versions versions before 2024 June 18 maintenance
Axseed,inc. Sppm Secure Filtering — versions versions before 2024 July 20 maintenance
Hammock Corporation Assetview F — versions versions before 2024 July 4 maintenance
Jma Systems Corporation Kaito Securebrowser — versions versions before 2024 July 4 maintenance

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

Frequently asked questions

What is CVE-2024-45504?: CVE-2024-45504 is a medium-severity vulnerability in Alps System Integration Co., Ltd. Intersafe Cats, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.5/10. Published 2024-09-10.
How severe is CVE-2024-45504?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2024-45504 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.