CSRF in Brickcom 100ap Device Firmware
CVE-2013-3690
Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add users.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.124 (95.8th percentile) — read the EPSS interpretation.
Affected products
- Brickcom 100ap_device_firmware — versions 3.1.0.8
- Brickcom Fb-100ap
- Brickcom Md-100ap
- Brickcom Ob-100ae
- Brickcom Osd-040e
- Brickcom Wcb-100ap
- Brickcom Wfb-100ap
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)