What is CVE-2013-6026?

CVE-2013-6026 is a vulnerability in Alphanetworks Vdsl Asl-55052, classified under CWE-264. Published 2013-10-19.

Is CVE-2013-6026 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Alphanetworks Vdsl Asl-55052

CVE-2013-6026

The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlset_roodkcableoj28840ybtide User-Agent HTTP header, as exploited in the wild in October 2013.

EPSS: 0.077 (94.0th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

References

cret@cert.org (Exploit, x_refsource_MISC)
cret@cert.org (x_refsource_CONFIRM)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)

Frequently asked questions

What is CVE-2013-6026?: CVE-2013-6026 is a vulnerability in Alphanetworks Vdsl Asl-55052, classified under CWE-264. Published 2013-10-19.
Is CVE-2013-6026 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.