CVE-2016-4854: CSRF

Published May 22, 2017

Updated

Cross-site request forgery (CSRF) vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors.

Affected Software

3 affected components

Nttdocomo L-04d Firmware=v10a

Nttdocomo L-04d Firmware=v10b

Nttdocomo L-04d

Event History

May 22, 2017

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-4854?

CVE-2016-4854 is classified as a high severity vulnerability due to its potential to allow remote attackers to hijack administrative authentication.

How do I fix CVE-2016-4854?

To fix CVE-2016-4854, update the L-04D firmware to a version that is not affected by the vulnerability.

What types of attacks are possible with CVE-2016-4854?

CVE-2016-4854 allows attackers to perform cross-site request forgery (CSRF) attacks to execute arbitrary operations as an administrator.

Which versions of the firmware are affected by CVE-2016-4854?

CVE-2016-4854 affects L-04D firmware versions V10a and V10b.

Who is impacted by CVE-2016-4854?

Administrators using vulnerable versions of the L-04D firmware are at risk from CVE-2016-4854.