CVE-2017-12703

A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The application does not verify whether a request was intentionally provided by the user, making it possible for an attacker to trick a user into making a malicious request to the server.

• CWE-352

• http://www.securityfocus.com/bid/100470Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/100470Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01Third Party Advisory, US Government Resource

Published

Aug 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12697A Man-in-the-Middle issue was discovered in General Motors (…
• CVE-2017-12698An Improper Authentication issue was discovered in Advantech…
• CVE-2017-12699An Incorrect Default Permissions issue was discovered in Aze…
• CVE-2017-1270IBM Security Guardium 10.0 does not renew a session variable…
• CVE-2017-12701BMC Medical Luna CPAP Machines released prior to July 1, 201…
• CVE-2017-12702An Externally Controlled Format String issue was discovered …
• CVE-2017-12704A heap-based buffer overflow issue was discovered in Advante…
• CVE-2017-12705A Heap-Based Buffer Overflow issue was discovered in Advante…
• CVE-2017-12706A stack-based buffer overflow issue was discovered in Advant…
• CVE-2017-12707A Stack-based Buffer Overflow issue was discovered in Spider…
• CVE-2017-12708An Improper Restriction Of Operations Within The Bounds Of A…
• CVE-2017-12709A Use of Hard-Coded Credentials issue was discovered in MRD-…