CVE Database
/

CVE-2013-0126

Back to search

CVE-2013-0126

Published: Mar 21, 2013

Modified: Sep 17, 2024

PUBLISHED

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via the username and user_level parameters or (2) enable remote administration via the is_telnet_primary and is_telnet_secondary parameters.

VendorProductVersions

n/a

n/a

affected
n/a

References

VU#278204
third-party-advisory
x_refsource_CERT-VN
24860
exploit
x_refsource_EXPLOIT-DB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now