CVE-2016-4504

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-21 · updated 2026-06-17
Weakness: CWE-352

Description

A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions. There is no CSRF Token generated per page or per function.

Affected products

Meteocontrol WEB'log: all versions

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01
https://ics-cert.us-cert.gov/advisories/ICSA-16-133-01

Get alerted when CVE-2016-4504 or the next vulnerability affects your stack