NVD

Id
32190  
Name
CVE-2014-4155  
Description
Cross-site request forgery (CSRF) vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to Forms/tools_admin_1.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-06-19  
Modified Date
2014-07-18  
Seq
2014-4155  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
169231 32190 CVE-2014-4155 http://packetstormsecurity.com/files/127129/ZTE-WXV10-W300-Disclosure-CSRF-Default.html  View
169232 32190 CVE-2014-4155 33803  View
169233 32190 CVE-2014-4155 https://osandamalith.wordpress.com/2014/06/15/zte-wxv10-w300-multiple-vulnerabilities  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14128 JVNDB-2014-003003 ZTE ZXV10 W300 ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 ZTE ZXV10 W300 ルータのファームウェアには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-4155 71443 CVE-2014-4155 32190 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003003.html 2014-05-15 2014-06-23 View