CVE-2023-22375

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Cross-site request forgery (CSRF) vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenticated attacker to hijack the authentication and conduct arbitrary operations by having a logged-in user to view a malicious page. NOTE: This vulnerability only affects products that are no longer supported by the developer.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
PLANEX COMMUNICATIONS INC.	Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G	all versions

References

https://jvn.jp/en/jp/JVN98612206/Third Party Advisory
https://www.planex.co.jp/support/support_end_list.shtmlProduct
https://jvn.jp/en/jp/JVN98612206/Third Party Advisory
https://www.planex.co.jp/support/support_end_list.shtmlProduct

Timeline

Published: Feb 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-223766.1Reflected cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenti CVE-2023-223777.4Improper restriction of XML external entity reference (XXE) vulnerability exists in tsClinical Define.xml Generator all versions (v1.0.0 to CVE-2023-223786.5A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows a CVE-2023-223795.5Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information d CVE-2023-223806.5A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages s CVE-2023-223818.8A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment variables from a single CVE-2023-223828.2Weak configuration in Automotive while VM is processing a listener request from TEE.CVE-2023-223837.8Memory Corruption in camera while installing a fd for a particular DMA buffer.CVE-2023-223847.8Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).CVE-2023-223859.8Memory Corruption in Data Modem while making a MO call or MT VOLTE call.CVE-2023-223867.8Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.CVE-2023-223877.8Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.