6.8
CVE-2013-0717
- EPSS 0.18%
- Published 19.03.2013 18:55:03
- Last modified 11.04.2025 00:51:21
- Source vultures@jpcert.or.jp
- Teams watchlist Login
- Open Login
Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.
Data is provided by the National Vulnerability Database (NVD)
Nec ≫ Atermwm3450rn Version-
Nec ≫ Atermwm3600r Version-
Nec ≫ Atermwr8160n Version-
Nec ≫ Atermwr8370n Version-
Nec ≫ Atermwr8600n Version-
Nec ≫ Atermwr9500n Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.37 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.