CVE-2016-1168

EUVD-2016-2272 · Published Apr 1, 2016

Cross-site request forgery (CSRF) vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users.

Technologies

Aterm Wf800HpAterm Wf800Hp Firmware

Weaknesses

CWE-352

CVSS scores

v3.08.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
v2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://jpn.nec.com/security-info/secinfo/nv16-004.html
http://jvn.jp/en/jp/JVN07818796/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000035

Potentially impacted assets

See if this affects your attack surface