{"id":"CVE-2024-45161","aliases":["EUVD-2024-55042","GHSA-899c-h4r4-cxr9"],"status":"published","title":"A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507....","description":"A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00148,"percentile":0.04105,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2025-10-29T00:00:00Z","modified":"2026-11-08T20:10:00Z","references":[{"url":"https://blu-castle.com/"},{"url":"https://www.gruppotim.it/it/footer/red-team/2024/CVE-2024-45161-Blu-Castle_BCUM221E.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45161"},{"url":"https://blu-castle.com"},{"url":"https://github.com/advisories/GHSA-899c-h4r4-cxr9"}],"sources":{"cve":[{"id":"CVE-2024-45161","description":"A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","status":"published","published":"2025-10-29T00:00:00Z","modified":"2025-10-29T14:29:46.131Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:34:07.831255Z"}],"euvd":[{"id":"EUVD-2024-55042","description":"A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","status":"published","published":"2025-10-29T00:00:00Z","modified":"2025-10-29T14:29:46Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:36.236088Z"}],"ghsa":[{"id":"GHSA-899c-h4r4-cxr9","title":"A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507....","description":"A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","status":"published","published":"2025-10-29T15:31:56Z","modified":"2025-10-29T15:32:03Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:04:14.772801Z"}],"nvd":[{"id":"CVE-2024-45161","description":"A CSRF issue was discovered in the administrative web GUI in Blu-Castle BCUM221E 1.0.0P220507. This can be exploited via a URL, an image load, an XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","status":"published","published":"2025-10-29T14:15:50.477Z","modified":"2026-11-08T20:10:00.187Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-08T22:11:09.065293Z"}]}}