high8.8
CVE-2016-1167
Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users.
Impact
Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aterm | Wg300hp Firmware | through 1.0.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jpn.nec.com/security-info/secinfo/nv16-005.html
- http://jvn.jp/en/jp/JVN82020528/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000036
- http://jpn.nec.com/security-info/secinfo/nv16-005.html
- http://jvn.jp/en/jp/JVN82020528/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000036