Auth bypass in Nisuta Ns-Wir150ne
CVE-2013-7282
The management web interface on the Nisuta NS-WIR150NE router with firmware 5.07.41 and Nisuta NS-WIR300N router with firmware 5.07.36_NIS01 allows remote attackers to bypass authentication via a "Cookie: :language=en" HTTP header.
Vulnerability class: Broken Authentication
EPSS: 0.096 (95.0th percentile) — read the EPSS interpretation.
Affected products
- Nisuta Ns-wir150ne
- Nisuta Ns-wir150ne_firmware — versions 5.07.41
- Nisuta Ns-wir300n
- Nisuta Ns-wir300n_firmware — versions 5.07.36_nis01
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (Exploit, x_refsource_MISC)