CVE-2025-24310

Published: Apr 4, 2025Modified: Jun 17, 2026Deferred

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: vultures@jpcert.or.jp (Secondary)

Description

Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote unauthenticated attacker to trick the product user to perform operations on the product's web pages.

Related CWEs

CWE-1021

Improper Restriction of Rendered UI Layers or Frames

The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with.

References (2)

https://jvn.jp/en/jp/JVN17260367/

Source: vultures@jpcert.or.jp

https://www.electronics.jtekt.co.jp/en/topics/202503207271/

Source: vultures@jpcert.or.jp

Timeline

No history available yet.