Vulnerability Details CVE-2008-0524
Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://jvn.jp/jp/JVN%2388575577/index.html
- http://secunia.com/advisories/28690
- http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html
- http://www.securityfocus.com/bid/27491
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40015
- http://jvn.jp/jp/JVN%2388575577/index.html
- http://secunia.com/advisories/28690
- http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html
- http://www.securityfocus.com/bid/27491
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40015
Products affected by CVE-2008-0524
-
cpe:2.3:h:yamaha:rt107e:*
-
cpe:2.3:h:yamaha:rt52pro:*
-
cpe:2.3:h:yamaha:rt56v:*
-
cpe:2.3:h:yamaha:rt57i:-
-
cpe:2.3:h:yamaha:rt58i:-
-
cpe:2.3:h:yamaha:rt60w:*
-
cpe:2.3:h:yamaha:rt80i:*
-
cpe:2.3:h:yamaha:rta50i:*
-
cpe:2.3:h:yamaha:rta52i:*
-
cpe:2.3:h:yamaha:rta54i:*
-
cpe:2.3:h:yamaha:rta55i:*
-
cpe:2.3:h:yamaha:rtv700:*
-
cpe:2.3:h:yamaha:rtw65b:*
-
cpe:2.3:h:yamaha:rtw65i:*
-
cpe:2.3:h:yamaha:rtx1000:*
-
cpe:2.3:h:yamaha:rtx1100:*
-
cpe:2.3:h:yamaha:rtx1500:*
-
cpe:2.3:h:yamaha:srt100:*