CVE-2013-3093 - Vulnerability Details - OpenCVE

ASUS RT-N56U devices allow CSRF.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Asus	Dsl-n55u Dsl-n55u Firmware Rt-ac66u Rt-ac66u Firmware Rt-n10u Rt-n10u Firmware Rt-n15u Rt-n15u Firmware Rt-n16 Rt-n16 Firmware Rt-n53 Rt-n53 Firmware Rt-n56u Rt-n56u Firmware

Configuration 1 [-]

AND

cpe:2.3:o:asus:rt-n56u_firmware:3.0.0.4.374_979:*:*:*:*:*:*:*

cpe:2.3:h:asus:rt-n56u:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:asus:rt-n10u_firmware:3.0.0.4.374_168:*:*:*:*:*:*:*

cpe:2.3:h:asus:rt-n10u:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:asus:dsl-n55u_firmware:3.0.0.4.374_1397:*:*:*:*:*:*:*

cpe:2.3:h:asus:dsl-n55u:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:asus:rt-ac66u_firmware:3.0.0.4.374_2050:*:*:*:*:*:*:*

cpe:2.3:h:asus:rt-ac66u:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:asus:rt-n15u_firmware:3.0.0.4.374_16:*:*:*:*:*:*:*

cpe:2.3:h:asus:rt-n15u:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:asus:rt-n53_firmware:3.0.0.4.374_311:*:*:*:*:*:*:*

cpe:2.3:h:asus:rt-n53:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:asus:rt-n16_firmware:3.0.0.4.374_979:*:*:*:*:*:*:*

cpe:2.3:h:asus:rt-n16:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.securityfocus.com/archive/1/531194

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-01-28T20:13:17

Updated: 2024-08-06T16:00:09.628Z

Reserved: 2013-04-17T00:00:00

Link: CVE-2013-3093

Vulnrichment

No data.

NVD

Status : Modified

Published: 2020-01-28T21:15:11.560

Modified: 2024-11-21T01:52:59.640

Link: CVE-2013-3093

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:asus:rt-n56u_firmware:3.0.0.4.374_979:*:*:*:*:*:*:*", "matchCriteriaId": "71FB53A0-E6FE-44AB-9C58-3D171D014C89", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:asus:rt-n56u:-:*:*:*:*:*:*:*", "matchCriteriaId": "534C0C95-9DD2-464C-8776-01B47398FE13", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:asus:rt-n10u_firmware:3.0.0.4.374_168:*:*:*:*:*:*:*", "matchCriteriaId": "829CAB34-EED3-4CE7-94D7-CAD9065F23EC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:asus:rt-n10u:-:*:*:*:*:*:*:*", "matchCriteriaId": "DC4DE1E4-5956-47DE-A3E5-41BACE56ECDD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:asus:dsl-n55u_firmware:3.0.0.4.374_1397:*:*:*:*:*:*:*", "matchCriteriaId": "9AF2B1DD-066D-4CF0-8B20-4BB0004AEDC2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:asus:dsl-n55u:-:*:*:*:*:*:*:*", "matchCriteriaId": "B81970C5-B766-4D2E-91EE-ADD5A9B77FF8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:asus:rt-ac66u_firmware:3.0.0.4.374_2050:*:*:*:*:*:*:*", "matchCriteriaId": "06072740-9813-463A-BE8D-005494458924", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:asus:rt-ac66u:-:*:*:*:*:*:*:*", "matchCriteriaId": "1ED39CBC-80ED-4037-9285-4D4CFA45F00E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:asus:rt-n15u_firmware:3.0.0.4.374_16:*:*:*:*:*:*:*", "matchCriteriaId": "373F0934-4234-4047-9FD1-100847A5BDF2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:asus:rt-n15u:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF1E024B-4966-43E5-882D-549E3DCF09FF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:asus:rt-n53_firmware:3.0.0.4.374_311:*:*:*:*:*:*:*", "matchCriteriaId": "C1B18E8F-EB3B-4766-8053-5C6890178305", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:asus:rt-n53:-:*:*:*:*:*:*:*", "matchCriteriaId": "D5055A58-33A0-4CC4-A855-50ABE0A4F358", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:asus:rt-n16_firmware:3.0.0.4.374_979:*:*:*:*:*:*:*", "matchCriteriaId": "A8FDC5CE-25FC-489E-9E4C-88FC8C885576", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:asus:rt-n16:-:*:*:*:*:*:*:*", "matchCriteriaId": "3E016FE0-0A28-49AA-A213-38A5F7728FE2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "ASUS RT-N56U devices allow CSRF."}, {"lang": "es", "value": "Los dispositivos ASUS RT-N56U, permiten un ataque de tipo CSRF."}], "id": "CVE-2013-3093", "lastModified": "2024-11-21T01:52:59.640", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-01-28T21:15:11.560", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.securityfocus.com/archive/1/531194"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.securityfocus.com/archive/1/531194"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "nvd@nist.gov", "type": "Primary"}]}