VulnerabilityModified
CVE-2013-5039
Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.11 allows remote attackers to hijack the authentication of administrators for requests that change the WiFi Security field to…
MEDIUM 5.4EPSS 2.13%
Does this matter?
Lower severity and a low EPSS score (2.13%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.11 allows remote attackers to hijack the authentication of administrators for requests that change the WiFi Security field to Deactivated via the WifiSecurity parameter.
- CVSS 2.0
- 5.4 MEDIUMAV:A/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 2.13% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- hot/hotbox router firmware · hot/hotbox router
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.htmlExploit
- http://www.youtube.com/watch?v=CPlT09ZIj48Exploit
- http://packetstormsecurity.com/files/123901/HOTBOX-2.1.11-CSRF-Traversal-Denial-Of-Service.htmlExploit
- http://www.youtube.com/watch?v=CPlT09ZIj48Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.