Plug&Track vulnerabilities
We track 2 vulnerabilities in Plug&Track products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2024.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Plug&Track vulnerabilities
- 8.3 High severity
Sensor Net Connect V2: Cross-Site Request Forgery
A “CWE-352: Cross-Site Request Forgery (CSRF)” can be exploited by remote attackers to perform state-changing operations with administrative privileges by luring authenticated victims into visiting a malicious web page.
- 7.8 High severity
Thermoscan IP: Incorrect Permission Assignment for Critical Resource
A “CWE-732: Incorrect Permission Assignment for Critical Resource” in the ThermoscanIP installation folder allows a local attacker to perform a Local Privilege Escalation.