CVE-2013-0717

EPSS 0.98%
Veröffentlicht 19.03.2013 18:55:03
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

NVD 6 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Nec ≫ Atermwm3450rn Version -

Nec ≫ Atermwm3600r Version -

Nec ≫ Atermwr8160n Version -

Nec ≫ Atermwr8370n Version -

Nec ≫ Atermwr8600n Version -

Nec ≫ Atermwr9500n Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.98%	0.577

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://jpn.nec.com/security-info/secinfo/nv13-005.html

http://jvn.jp/en/jp/JVN59503133/6443/index.html

http://jvn.jp/en/jp/JVN59503133/index.html

http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024

https://nvd.nist.gov/vuln/detail/CVE-2013-0717

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-0717

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-0717

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2013-0717