Vulnerability CVE-2013-3539
Published: 2013-10-01   Modified: 2013-10-05

Description:
Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.

See advisories in our WLB2 database:
Topic
Author
Date
Low
Sony CH / DH Cross Site Request Forgery
Jonas Ropero Cas...
13.06.2013

Type:

CWE-352

 (Cross-Site Request Forgery (CSRF))

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
6.4/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
SONY -> Snc ch140 
SONY -> Snc ch180 
SONY -> Snc ch240 
SONY -> Snc ch280 
SONY -> Snc dh140 
SONY -> Snc dh140t 
SONY -> Snc dh180 
SONY -> Snc dh240 
SONY -> Snc dh240t 
SONY -> Snc dh280 
Ovislink -> Airlive wl2600cam 

 References:
http://seclists.org/fulldisclosure/2013/Jun/84
Copyright 2024, cxsecurity.com

 

Back to Top