CoreCVE
Back

MEDIUM

Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to hijack the authentication of (1) administrator or (2) device users for requests that create new administrative users or have unspecified other impact

Published Dec 28, 2009

Description

Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to hijack the authentication of (1) administrator or (2) device users for requests that create new administrative users or have unspecified other impact.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (5)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 28, 2009
Updated Sep 17, 2024
Reserved May 26, 2009
Link CVE-2009-1797
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2009-1797
Red Hat
Severity n/a
Public date n/a
Links CVE-2009-1797
ENISA EUVD
Assigner mitre
Published Dec 28, 2009
Updated Sep 17, 2024
Exploited since n/a
Link EUVD-2009-1792
EUVD-2009-1792