N300 Firmware CVE-2013-3089

MEDIUM

Cross-Site Request Forgery (CSRF) (CWE-352)

2014-09-29 cve@mitre.org

CSRF N300 Firmware N300

6.8

CVSS 2.0 · NVD

Share

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:P

Attack Vector

Network

Attack Complexity

M

Confidentiality

P

Integrity

P

Availability

P

Lifecycle Timeline

1

CVE Published

Sep 29, 2014 - 22:55 cve.org

MEDIUM 6.8

DescriptionCVE.org

Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers to hijack the authentication of administrators for requests that modify configuration.

AnalysisAI

Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers to hijack the authentication of administrators for requests that modify. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352), which allows attackers to trick authenticated users into performing unintended actions. Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers to hijack the authentication of administrators for requests that modify configuration. Affected products include: Belkin N300 Firmware, Belkin N300.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement anti-CSRF tokens, validate Origin/Referer headers, use SameSite cookie attribute.

More in N300 Firmware

View all

CVE-2024-39227 CRITICAL Act Now POC

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/

CVE-2024-39228 CRITICAL Act Now POC

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/

CVE-2024-39226 CRITICAL Act Now POC

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/

CVE-2024-39225 CRITICAL Act Now POC

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/

CVE-2022-30105 CRITICAL Act Now POC

In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configu

CVE-2013-3092 HIGH This Week POC

The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via vectors rela

CVE-2024-27356 HIGH This Week POC

An issue was discovered on certain GL-iNet devices. Rated high severity (CVSS 7.5), this vulnerability is remotely explo

CVE-2024-39229 MEDIUM This Month POC

An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT

CVE-2024-25343 CRITICAL Act Now

Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords. Rated crit

CVE-2023-4498 MEDIUM This Month

Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn should be accessible to aut

Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)

View all

CVE-2016-6277 HIGH POC

CVE-2014-100005 HIGH POC

CVE-2013-5696 MEDIUM POC

CVE-2020-36836 HIGH POC

CVE-2015-2295 MEDIUM POC

CVE-2016-6897 MEDIUM POC

CVE-2022-41622 HIGH POC

CVE-2025-2907 CRITICAL POC

Same technique CSRF

View all

CVE-2016-6277 HIGH POC

CVE-2014-100005 HIGH POC

CVE-2017-9757 HIGH POC

CVE-2013-5696 MEDIUM POC

CVE-2013-4152 MEDIUM POC

CVE-2024-7094 CRITICAL

CVE-2015-4624 HIGH POC

CVE-2020-36836 HIGH POC

Share

CVE-2013-3089 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy