Lucene search

Japan Vulnerability NotesJVN:33021167

HistoryFeb 01, 2012 - 12:00 a.m.

JVN#33021167: Pocket WiFi (GP02) vulnerable to cross-site request forgery

2012-02-0100:00:00

Japan Vulnerability Notes

jvn.jp

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

59.6%

JSON

Pocket WiFi (GP02) provided by eAccess Ltd. is a mobile wireless LAN router. Pocket WiFi (GP02) contains a cross-site request forgery vulnerability.

Impact

If a user views a malicious page while logged in, settings of Pocket WiFi (GP02) may be initialized, or Pocket WiFi (GP02) may be rebooted.

Solution

Update the Software
Update to the latest version of the firmware provided by the developer.

Products Affected

Pocket WiFi (GP02) firmware version 11.203.11.05.168 and earlier

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

59.6%

JSON

Related for JVN:33021167