NVD

Id
56933  
Name
CVE-2007-4822  
Description
Cross-site request forgery (CSRF) vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attackers to make configuration changes as an administrator via HTTP requests to certain HTML pages in the res parameter with an inp req parameter to cgi-bin/cgi, as demonstrated by accessing (1) ap.html and (2) filter_ip.html.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-09-11  
Modified Date
2011-04-25  
Seq
2007-4822  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290591 56933 CVE-2007-4822 3117  View
290592 56933 CVE-2007-4822 http://www.louhi.fi/advisory/buffalo_070907.txt  View
290593 56933 CVE-2007-4822 20070907 Buffalo AirStation WHR-G54S CSRF vulnerability  View
290594 56933 CVE-2007-4822 20070907 Re: Buffalo AirStation WHR-G54S CSRF vulnerability  View
290595 56933 CVE-2007-4822 25588  View
290596 56933 CVE-2007-4822 buffalo-aoss-management-csrf(36492)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53929 JVNDB-2007-002621 Buffalo AirStation WHR-G54S のデバイス管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 Buffalo AirStation WHR-G54S のデバイス管理インターフェースには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2007-4822 28177 CVE-2007-4822 56933 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002621.html 2007-09-11 2012-06-26 View