CVE-2013-3539

2022-10-0316:14:46

CWE-352

[email protected]

web.nvd.nist.gov

cve-2013-3539

csrf

vulnerability

sony

snc

cameras

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.4%

JSON

Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.

Affected configurations

NVD

Node

ovislinkairlive_wl2600camMatch-

sonysnc_ch140Match-

sonysnc_ch180Match-

sonysnc_ch240Match-

sonysnc_ch280Match-

sonysnc_dh140Match-

sonysnc_dh140tMatch-

sonysnc_dh180Match-

sonysnc_dh240Match-

sonysnc_dh240tMatch-

sonysnc_dh280Match-

CPENameOperatorVersion
ovislink:airlive_wl2600camovislink airlive wl2600cameq-
sony:snc_ch140sony snc ch140eq-
sony:snc_ch180sony snc ch180eq-
sony:snc_ch240sony snc ch240eq-
sony:snc_ch280sony snc ch280eq-
sony:snc_dh140sony snc dh140eq-
sony:snc_dh140tsony snc dh140teq-
sony:snc_dh180sony snc dh180eq-
sony:snc_dh240sony snc dh240eq-
sony:snc_dh240tsony snc dh240teq-

CPE	Name	Operator	Version
ovislink:airlive_wl2600cam	ovislink airlive wl2600cam	eq	-
sony:snc_ch140	sony snc ch140	eq	-
sony:snc_ch180	sony snc ch180	eq	-
sony:snc_ch240	sony snc ch240	eq	-
sony:snc_ch280	sony snc ch280	eq	-
sony:snc_dh140	sony snc dh140	eq	-
sony:snc_dh140t	sony snc dh140t	eq	-
sony:snc_dh180	sony snc dh180	eq	-
sony:snc_dh240	sony snc dh240	eq	-
sony:snc_dh240t	sony snc dh240t	eq	-