medium6.8
CVE-2013-0717
Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nec | Atermwm3450rn | All versions |
| Nec | Atermwm3600r | All versions |
| Nec | Atermwr8160n | All versions |
| Nec | Atermwr8370n | All versions |
| Nec | Atermwr8600n | All versions |
| Nec | Atermwr9500n | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://jpn.nec.com/security-info/secinfo/nv13-005.html
- http://jvn.jp/en/jp/JVN59503133/6443/index.html
- http://jvn.jp/en/jp/JVN59503133/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024
- http://jpn.nec.com/security-info/secinfo/nv13-005.html
- http://jvn.jp/en/jp/JVN59503133/6443/index.html
- http://jvn.jp/en/jp/JVN59503133/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024