CVE-2009-1797: Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American...

Security readout for executives and security teams

This issue affects APC Network Management Card interfaces on Switched Rack PDU devices and possibly other APC devices. A malicious site could cause a logged-in device administrator or user to submit unintended management requests, including creating a new administrative user. The source data does not provide a CVSS score, exact affected versions, or confirmed active exploitation. Highest concern is APC NMC web interfaces reachable by administrators, especially on management networks where users stay logged in. Internet-exposed or broadly reachable power-management interfaces would increase business risk. The bundle does not identify exact firmware versions or all affected devices. Treat this as a targeted infrastructure-management risk rather than a broad internet emergency. Prioritize sites where APC power distribution devices are remotely managed or reachable outside a restricted admin network. The main business concern is unauthorized management access to power equipment. Mitigation focus: Check APC advisory FAQ and CERT VU#166739 for affected firmware and vendor guidance.; Limit NMC web access to trusted management networks and administrators.; Remove unnecessary administrative accounts and review account creation history..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.