Lucene search

K
cveMitreCVE-2013-2751
HistoryDec 12, 2013 - 6:55 p.m.

CVE-2013-2751

2013-12-1218:55:10
CWE-94
mitre
web.nvd.nist.gov
115
cve
2013
2751
eval injection
frontview
np_handler.pl
netgear
readynas
raidiator
security vulnerability
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.629

Percentile

97.9%

Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the “forgot password workflow.”

Affected configurations

Nvd
Node
netgearraidiatorRange4.14.1.12readynas
OR
netgearraidiatorRange4.24.2.24readynas
VendorProductVersionCPE
netgearraidiator*cpe:2.3:o:netgear:raidiator:*:*:*:*:*:readynas:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.629

Percentile

97.9%