Lucene search

K
cve[email protected]CVE-2013-7282
HistoryJan 10, 2014 - 12:02 p.m.

CVE-2013-7282

2014-01-1012:02:51
CWE-287
web.nvd.nist.gov
33
nisuta
ns-wir150ne
ns-wir300n
router
firmware
authentication bypass
cve-2013-7282
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.062 Low

EPSS

Percentile

93.6%

The management web interface on the Nisuta NS-WIR150NE router with firmware 5.07.41 and Nisuta NS-WIR300N router with firmware 5.07.36_NIS01 allows remote attackers to bypass authentication via a “Cookie: :language=en” HTTP header.

Affected configurations

NVD
Node
nisutans-wir150ne_firmwareMatch5.07.41
AND
nisutans-wir150neMatch-
Node
nisutans-wir300n_firmwareMatch5.07.36_nis01
AND
nisutans-wir300nMatch-

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.062 Low

EPSS

Percentile

93.6%

Related for CVE-2013-7282