CVE-2008-0524: CSRF
First published: Thu Jan 31 2008(Updated: )
Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Yamaha RT107E | ||
| Yamaha RT52Pro | ||
| Yamaha RT56V | ||
| Yamaha RT57i firmware | ||
| Yamaha RT58i | ||
| Yamaha RT60W | ||
| Yamaha RT80i | ||
| Yamaha RTA50i | ||
| Yamaha RTA52i | ||
| Yamaha RTA54i | ||
| Yamaha RTA55i | ||
| Yamaha RTV700 | ||
| Yamaha RTW65B | ||
| Yamaha RTW65i | ||
| Yamaha RTX1000 | ||
| Yamaha RTX1100 | ||
| Yamaha RTX1500 | ||
| Yamaha SRT100 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2008-0524?
CVE-2008-0524 is considered a high severity vulnerability due to its potential to allow unauthorized changes to router configurations.
How do I fix CVE-2008-0524?
To fix CVE-2008-0524, update the firmware of your affected Yamaha RT series router to the latest version provided by the manufacturer.
Which devices are affected by CVE-2008-0524?
CVE-2008-0524 affects multiple Yamaha RT series routers including models like RTA52i, RT56V, and many others.
What type of vulnerability is CVE-2008-0524?
CVE-2008-0524 is classified as a cross-site request forgery (CSRF) vulnerability.
Can CVE-2008-0524 lead to unauthorized access?
Yes, CVE-2008-0524 can potentially lead to unauthorized access by allowing attackers to change password and other configuration settings.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/yamaha
- canonical/yamaha rta52i
- canonical/yamaha rt56v
- canonical/yamaha rta50i
- canonical/yamaha rt107e
- canonical/yamaha rt58i
- canonical/yamaha rta54i
- canonical/yamaha rtw65b
- canonical/yamaha rt80i
- canonical/yamaha rtx1000
- canonical/yamaha rta55i
- canonical/yamaha rt57i firmware
- canonical/yamaha rt52pro
- canonical/yamaha rt60w
- canonical/yamaha rtv700
- canonical/yamaha srt100
- canonical/yamaha rtx1500
- canonical/yamaha rtx1100
- canonical/yamaha rtw65i