CVE-2013-3690

EUVD-2013-3623
Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add users.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
Affected Products (NVD)
VendorProductVersion
brickcom100ap_device_firmware
3.1.0.8
brickcomfb-100ap
-
brickcommd-100ap
-
brickcomob-100ae
-
brickcomosd-040e
-
brickcomwcb-100ap
-
brickcomwfb-100ap
-
𝑥
= Vulnerable software versions