CVE-2013-2752

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0040%

EPSS Percentile16.04th

Published2013年12月12日

Last Modified2026年4月29日

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in frontview/lib/np_handler.pl in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to hijack the authentication of users.

Affected Platforms (CPE)

💻

Netgear

Raidiator

>= 4.1 and < 4.1.12

💻

Netgear

Raidiator

>= 4.2 and < 4.2.24

References & Advisories

🔗 http://www.osvdb.org/98825

🔗 http://www.readynas.com/?p=7002

🔗 http://www.tripwire.com/register/security-advisory-netgear-readynas/

🔗 http://www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/

🔗 http://www.osvdb.org/98825

🔗 http://www.readynas.com/?p=7002

🔗 http://www.tripwire.com/register/security-advisory-netgear-readynas/

🔗 http://www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/

Vulnerability Description

Affected Platforms (CPE)

Raidiator

Raidiator

References & Advisories

相关漏洞威胁