CVE-2016-1167 in Aterm WG300HP

Summary

Cross-site request forgery (CSRF) vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/26/2015
• Disclosure: 04/01/2016
• Moderation: VulDB entry created
• Entries: VDB-81559 (1)
• CPE: ready
• CWE: CWE-352 (Confirmed)
• CVSS: 8.8
• EPSS: 0.00129
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1167
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1167
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1167/