CVEvulnerability

CVE-2013-3963

6.8 MEDIUM Published 2013-10-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-10-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models allows remote attackers to hijack the authentication of unspecified victims for requests that add users.

Affected configurations

• grandstream gxv device firmware (<= 1.0.4.43) • grandstream gxv device firmware 1.0.2.3 • grandstream gxv device firmware 1.0.3.9 • grandstream gxv device firmware 1.0.4.6 • grandstream gxv device firmware 1.0.4.7 • grandstream gxv device firmware 1.0.4.11 • grandstream gxv device firmware 1.0.4.16 • grandstream gxv device firmware 1.0.4.27 • grandstream gxv device firmware 1.0.4.34 • grandstream gxv device firmware 1.0.4.37 • grandstream gxv device firmware 1.0.4.38 • grandstream gxv device firmware 1.0.4.39 • grandstream gxv device firmware 1.0.4.42 • grandstream gxv3500 • grandstream gxv3501 • grandstream gxv3504 • grandstream gxv3601 • grandstream gxv3601hd\/ll • grandstream gxv3611hd\/ll • grandstream gxv3615w\/p • grandstream gxv3615wp hd • grandstream gxv3651fhd • grandstream gxv3662hd

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References