What is the CVSS score of CVE-2013-3963?

CVE-2013-3963 has a CVSS 2.0 base score of 6.8 (Medium). CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:P. EPSS exploitation probability: 0.4%.

Is there a public PoC exploit available for CVE-2013-3963?

Yes, a public proof-of-concept exploit is available for CVE-2013-3963. Prioritise patching immediately. EPSS: 0.4%.

Gxv Device Firmware CVE-2013-3963

MEDIUM

Cross-Site Request Forgery (CSRF) (CWE-352)

2013-10-01 cve@mitre.org

CSRF Gxv Device Firmware Gxv3500 Gxv3501 Gxv3504 Gxv3601 Gxv3601Hd Ll Gxv3611Hd Ll Gxv3615W P Gxv3615Wp Hd Gxv3651Fhd Gxv3662Hd

6.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:P

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Oct 01, 2013 - 19:55 cve.org

MEDIUM 6.8

DescriptionCVE.org

Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models allows remote attackers to hijack the authentication of unspecified victims for requests that add users.

AnalysisAI

Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500,. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352), which allows attackers to trick authenticated users into performing unintended actions. Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models allows remote attackers to hijack the authentication of unspecified victims for requests that add users. Affected products include: Grandstream Gxv Device Firmware, Grandstream Gxv3500, Grandstream Gxv3501, Grandstream Gxv3504, Grandstream Gxv3601.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement anti-CSRF tokens, validate Origin/Referer headers, use SameSite cookie attribute.