Vulnerability Details CVE-2013-3690
Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 76.6%
CVSS Severity
CVSS v2 Score 6.8
References
Products affected by CVE-2013-3690
-
cpe:2.3:h:brickcom:fb-100ap:-
-
cpe:2.3:h:brickcom:md-100ap:-
-
cpe:2.3:h:brickcom:ob-100ae:-
-
cpe:2.3:h:brickcom:osd-040e:-
-
cpe:2.3:h:brickcom:wcb-100ap:-
-
cpe:2.3:h:brickcom:wfb-100ap:-
-
cpe:2.3:o:brickcom:100ap_device_firmware:3.1.0.8