CVE-2013-0717 - CVE House
Back to Database
Status published Medium CVE-2013-0717

Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management...

Vulnerability Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-0717

Credits & Attribution

No credits recorded in the NVD database.

References

More from nec

View All →
CVE-2021-44746
UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0...
Medium 5.3
CVE-2019-20033
On Aspire-derived NEC PBXes, including all versions of SV8100 devices,...
Critical 9.8
CVE-2019-20032
An attacker with access to an InMail voicemail box equipped...
Medium 6.5
CVE-2019-20031
NEC UM8000, UM4730 and prior non-InMail voicemail systems with all...
Critical 9.1
CVE-2019-20030
An attacker with knowledge of the modem access number on...
High 7.8

Affected Vendor

Affected Software

atermwm3450rn, atermwm3600r, atermwr8160n, atermwr8370n, atermwr8600n, atermwr9500n
Vulnerable Versions:
Unknown

Timeline

Official Publish: March 19th, 2013
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.