CVE-2013-7204

EUVD-2013-6987
Cross-site request forgery (CSRF) vulnerability in set_users.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21.37.2.49 allows remote attackers to hijack the authentication of administrators for requests that add arbitrary users.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
conceptroniccipcamptiwl_1.0_firmware
21.37.2.49
conceptroniccipcamptiwl
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/101930
http://www.exploit-db.com/exploits/30914
http://www.securityfocus.com/archive/1/530717/100/0/threaded
http://osvdb.org/101930
http://www.exploit-db.com/exploits/30914
http://www.securityfocus.com/archive/1/530717/100/0/threaded