This vulnerability allows an attacker to perform cross-site request forgery attacks on Contec FXA5000 devices. If a logged-in user visits a maliciously crafted page, the attacker may cause the device to execute unintended actions without the user's consent. The issue affects multiple versions of the FXA5000 product prior to versions 1.01.00, 1.02, 1.03, 1.14.00, 1.20.00, 1.61, 1.82, and 1.12.00 as indicated by the affected version ranges. The CVSS 3.0 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact.

An attacker can exploit this vulnerability to cause a logged-in user to unknowingly perform actions on the FXA5000 device by tricking them into visiting a malicious web page. This could lead to unauthorized changes or operations on the device, impacting its integrity. There is no impact on confidentiality or availability according to the CVSS metrics.

No patch or official remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid visiting untrusted web pages while logged into the affected FXA5000 devices.