6.8
CVE-2013-7204
- EPSS 10.6%
- Veröffentlicht 17.01.2014 15:18:02
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site request forgery (CSRF) vulnerability in set_users.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21.37.2.49 allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Conceptronic ≫ Cipcamptiwl 1.0 Firmware Version21.37.2.49
Conceptronic ≫ Cipcamptiwl Version1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 10.6% | 0.952 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
http://osvdb.org/101930
http://www.exploit-db.com/exploits/30914
http://www.securityfocus.com/archive/1/530717/100/0/threaded