« Volver al listado

CVE-2013-3690

Estado: ModificadaMedia (6.8)—

Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add users.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (7)

Brickcom — 100ap Device FirmwareBrickcom — Fb-100apBrickcom — Md-100apBrickcom — Ob-100aeBrickcom — Osd-040eBrickcom — Wcb-100apBrickcom — Wfb-100ap

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3690",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-10-01T19:55:09.397",
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2013/Jun/84",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2013/Jun/84",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add users."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de CSRF en cgi-bin/users.cgi en Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, y posiblemente otros modelos de cámara con firmware 3.1.0.8 y anteriores, permite a atacantes remotos secuestrar la autenticación de administradores para peticiones que incluyan usuarios."
    }
  ],
  "lastModified": "2026-06-16T23:55:38.413",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:brickcom:100ap_device_firmware:3.1.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C749291-D2A6-41CD-AF03-E0DAE0056FA0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:brickcom:fb-100ap:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8793329F-0144-40FB-A2C5-AC5F8E3A2DAF"
            },
            {
              "criteria": "cpe:2.3:h:brickcom:md-100ap:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7272E6B1-E94B-463E-843B-DCD5448718B5"
            },
            {
              "criteria": "cpe:2.3:h:brickcom:ob-100ae:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8DC5FA0-0BD5-41A3-8924-AC775728A763"
            },
            {
              "criteria": "cpe:2.3:h:brickcom:osd-040e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BDD54A2-36B9-4A17-8C2D-A0CCB9CD5379"
            },
            {
              "criteria": "cpe:2.3:h:brickcom:wcb-100ap:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A2CF165-23AA-4C7D-9D8F-3A225CAB3193"
            },
            {
              "criteria": "cpe:2.3:h:brickcom:wfb-100ap:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9DD4683-503D-4F23-A9D3-531A04207E37"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}