Lucene search

K
nvd[email protected]NVD:CVE-2013-3539
HistoryOct 01, 2013 - 7:55 p.m.

CVE-2013-3539

2013-10-0119:55:03
CWE-352
web.nvd.nist.gov
3

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.4%

Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.

Affected configurations

NVD
Node
ovislinkairlive_wl2600camMatch-
OR
sonysnc_ch140Match-
OR
sonysnc_ch180Match-
OR
sonysnc_ch240Match-
OR
sonysnc_ch280Match-
OR
sonysnc_dh140Match-
OR
sonysnc_dh140tMatch-
OR
sonysnc_dh180Match-
OR
sonysnc_dh240Match-
OR
sonysnc_dh240tMatch-
OR
sonysnc_dh280Match-

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.4%

Related for NVD:CVE-2013-3539