Lucene search
HistoryJun 19, 2014 - 2:55 p.m.
CVE-2014-4155
zte
zxv10
w300
csrf
vulnerability
router
firmware
nvd
cve-2014-4155
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.7%
Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to Forms/tools_admin_1.
Affected configurations
Node
ztezxv10_w300_firmwareMatch1.0.0a_zrd_lk
ztezxv10_w300Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| zte:zxv10_w300_firmware | zte zxv10 w300 firmware | eq | 1.0.0a_zrd_lk |
| zte:zxv10_w300 | zte zxv10 w300 | eq | - |
Related
prion
prion
Cross site request forgery (csrf)
2014-06-19 14:55:00
cvelist
cvelist
CVE-2014-4155
2014-06-19 14:00:00
nvd
nvd
CVE-2014-4155
2014-06-19 14:55:08
packetstorm
packetstorm
ZTE WXV10 W300 Disclosure / CSRF / Default
2014-06-17 00:00:00
exploitpack
exploitpack
ZTE WXV10 W300 - Multiple Vulnerabilities
2014-06-18 00:00:00
seebug
seebug
ZTE WXV10 W300 - Multiple Vulnerabilities
2014-07-01 00:00:00
openvas
openvas
ZTE WXV10 W300 Multiple Vulnerabilities
2014-06-25 00:00:00
exploitdb
exploitdb
ZTE WXV10 W300 - Multiple Vulnerabilities
2014-06-18 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.7%
Related for CVE-2014-4155