CVE-2013-0717

2022-10-0316:15:03

jpcert

www.cve.org

cve-2013-0717

nec atermwr9500n

web-based management

csrf vulnerabilities

remote attackers

hijack authentication

administrators

initialize settings

reboot device

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.9%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.