CVE-2013-0717: CSRF
First published: Tue Mar 19 2013(Updated: )
Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nec Atermwm3450rn | ||
| Nec Atermwm3600r | ||
| Nec Atermwr8160n | ||
| Nec Atermwr8370n | ||
| Nec Atermwr8600n | ||
| NEC AtermWR9500N |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/event
- agent/description
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nec
- canonical/nec atermwm3450rn
- canonical/nec atermwm3600r
- canonical/nec atermwr8160n
- canonical/nec atermwr8370n
- canonical/nec atermwr8600n
- canonical/nec atermwr9500n