https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:27:47.154094+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-05156 cnvd-2017-05156 2026-10-06T22:27:47.159890+00:00 cnvd-2017-05156 https://cve.radiocsirt.org/vuln/euvd-2026-73122 EUVD-2026-73122 2026-10-06T22:27:47.159927+00:00 EUVD-2026-73122 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5156 fkie_cve-2017-5156 2026-10-06T22:27:47.159941+00:00

A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user.

 https://cve.radiocsirt.org/vuln/ghsa-cx74-jcx5-x32v GHSA-cx74-jcx5-x32v 2026-10-06T22:27:47.159970+00:00

A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 and prior. The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user.

 https://cve.radiocsirt.org/vuln/gsd-2017-5156 gsd-2017-5156 2026-10-06T22:27:47.159985+00:00 gsd-2017-5156 https://cve.radiocsirt.org/vuln/icsa-17-089-01 ICSA-17-089-01 — Schneider Electric Wonderware InTouch Access Anywhere 2026-10-06T22:27:47.159996+00:00

The client request may be forged from a different site. This will allow an external site to access internal RDP systems on behalf of the currently logged in user.CVE-2017-5156 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Credentials may be exposed to external systems via specific URL parameters, as arbitrary destination addresses may be specified.CVE-2017-5158 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been calculated by Schneider Electric; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). The software will connect via Transport Layer Security without verifying the peer 's SSL certificate properly.CVE-2017-5160 has been assigned to this vulnerability. A CVSS v3 base score of 5.3 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).