CVEvulnerability
CVE-2008-0524
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-01-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors.
Affected configurations
• yamaha rt107e
• yamaha rt52pro
• yamaha rt56v
• yamaha rt57i
• yamaha rt58i
• yamaha rt60w
• yamaha rt80i
• yamaha rta50i
• yamaha rta52i
• yamaha rta54i
• yamaha rta55i
• yamaha rtv700
• yamaha rtw65b
• yamaha rtw65i
• yamaha rtx1000
• yamaha rtx1100
• yamaha rtx1500
• yamaha srt100
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://jvn.jp/jp/JVN%2388575577/index.html jvn.jp
- http://secunia.com/advisories/28690 secunia.com
- http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html www.rtpro.yamaha.co.jp
- http://www.securityfocus.com/bid/27491 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40015 exchange.xforce.ibmcloud.com
- http://jvn.jp/jp/JVN%2388575577/index.html jvn.jp
- http://secunia.com/advisories/28690 secunia.com
- http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html www.rtpro.yamaha.co.jp
- http://www.securityfocus.com/bid/27491 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40015 exchange.xforce.ibmcloud.com