CVEvulnerability
CVE-2013-0717
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.
Affected configurations
• nec atermwm3450rn
• nec atermwm3600r
• nec atermwr8160n
• nec atermwr8370n
• nec atermwr8600n
• nec atermwr9500n
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://jpn.nec.com/security-info/secinfo/nv13-005.html jpn.nec.com
- http://jvn.jp/en/jp/JVN59503133/6443/index.html jvn.jp
- http://jvn.jp/en/jp/JVN59503133/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024 jvndb.jvn.jp
- http://jpn.nec.com/security-info/secinfo/nv13-005.html jpn.nec.com
- http://jvn.jp/en/jp/JVN59503133/6443/index.html jvn.jp
- http://jvn.jp/en/jp/JVN59503133/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024 jvndb.jvn.jp