NVD

Id
38685  
Name
CVE-2013-2751  
Description
Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-12-12  
Modified Date
2013-12-13  
Seq
2013-2751  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
198247 38685 CVE-2013-2751 http://packetstormsecurity.com/files/123726/Netgear-ReadyNAS-Complete-System-Takeover.html  View
198248 38685 CVE-2013-2751 29815  View
198249 38685 CVE-2013-2751 http://www.readynas.com/?p=7002  View
198250 38685 CVE-2013-2751 http://www.tripwire.com/register/security-advisory-netgear-readynas/  View
198251 38685 CVE-2013-2751 http://www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23943 JVNDB-2013-005518 NETGEAR ReadyNAS RAIDiator の FrontView Web インターフェースにおける任意の Perl コードを実行される脆弱性 NETGEAR ReadyNAS RAIDiator の FrontView Web インターフェースの frontview/lib/np_handler.pl には、"forgot password workflow" に関する処理に不備があるため、Eval インジェクションにより、任意の Perl コードを実行される脆弱性が存在します。 CVE-2013-2751 62693 CVE-2013-2751 38685 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005518.html 2013-07-12 2013-12-17 View