CVE-2013-0126

🗓️ 21 Mar 2013 20:00:00Reported by certccType

cve

cve🔗 web.nvd.nist.gov👁 66 Views🌐 WEB

"CVE-2013-0126 CSRF vulnerabilities in Verizon FIOS router firmware 40.19.36

Reporter	Title	Published	Views	Family All 13
0day.today	Verizon Fios Router MI424WR-GEN3I - CSRF Vulnerability	19 Mar 201300:00	–	zdt
0day.today	Verizon Fios Router MI424WR-GEN3I CSRF Vulnerability	20 Mar 201300:00	–	zdt
ATTACKERKB	CVE-2013-0126	21 Mar 201320:55	–	attackerkb
Cvelist	CVE-2013-0126	21 Mar 201320:00	–	cvelist
Exploit DB	Verizon Fios Router MI424WR-GEN3I - Cross-Site Request Forgery	19 Mar 201300:00	–	exploitdb
EUVD	EUVD-2013-0169	7 Oct 202500:30	–	euvd
exploitpack	Verizon Fios Router MI424WR-GEN3I - Cross-Site Request Forgery	19 Mar 201300:00	–	exploitpack
NVD	CVE-2013-0126	21 Mar 201320:55	–	nvd
Packet Storm	Verizon Fios Router MI424WR-GEN3I CSRF	19 Mar 201300:00	–	packetstorm
Prion	Cross site request forgery (csrf)	21 Mar 201320:55	–	prion

NVD

Node

verizon fios_actiontec_mi424wr-gen31_router_firmwareMatch40.19.36

AND

verizon fios_actiontec_mi424wr-gen31_routerMatch-

Source	Link
exploit-db	www.exploit-db.com/exploits/24860/
infosec42	www.infosec42.blogspot.com/2013/03/verizon-fios-router-csrf-cve-2013-0126.html
kb	www.kb.cert.org/vuls/id/278204

Parameter	Position	Path	Description	CWE
username	request body	/index.cgi	CSRF to add an administrative user via index.cgi	CWE-352
user_level	request body	/index.cgi	CSRF to add an administrative user via index.cgi	CWE-352
is_telnet_primary	request body	/index.cgi	CSRF to enable remote administration via index.cgi	CWE-352
is_telnet_secondary	request body	/index.cgi	CSRF to enable remote administration via index.cgi	CWE-352

16 Jun 2026 23:48Current

7.3High risk

Vulners AI Score7.3

CVSS 26.8

EPSS0.02938

cve-2013-0126 csrf verizon fios router firmware 40.19.36 security vulnerability