CVE-2013-0126: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via the username and userlevel parameters or (2) enable remote administration via the istelnetprimary and istelnetsecondary parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0126?
CVE-2013-0126 is classified as a medium severity vulnerability due to its potential for unauthorized administrative access.
How do I fix CVE-2013-0126?
To mitigate CVE-2013-0126, update the Verizon FIOS Actiontec MI424WR-GEN3I router firmware to the latest version provided by the vendor.
What devices are affected by CVE-2013-0126?
CVE-2013-0126 affects the Verizon FIOS Actiontec MI424WR-GEN3I router running firmware version 40.19.36.
What type of vulnerability is CVE-2013-0126?
CVE-2013-0126 is a cross-site request forgery (CSRF) vulnerability that allows attackers to hijack administrative authentication.
Can CVE-2013-0126 be exploited remotely?
Yes, CVE-2013-0126 can be exploited remotely, allowing attackers to perform unauthorized administrative actions on the router.