{"api_version":"1","generated_at":"2026-07-23T09:40:15+00:00","cve":"CVE-2013-0717","urls":{"html":"https://cve.report/CVE-2013-0717","api":"https://cve.report/api/cve/CVE-2013-0717.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-0717","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-0717"},"summary":{"title":"CVE-2013-0717","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.","state":"PUBLISHED","assigner":"jpcert","published_at":"2013-03-19 18:55:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-352","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://jpn.nec.com/security-info/secinfo/nv13-005.html","name":"http://jpn.nec.com/security-info/secinfo/nv13-005.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"NV13-005: NEC製品セキュリティ情報 | NEC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024","name":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/en/jp/JVN59503133/6443/index.html","name":"http://jvn.jp/en/jp/JVN59503133/6443/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Japan Vulnerability Notes/Information from NEC Corporation","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"http://jvn.jp/en/jp/JVN59503133/index.html","name":"http://jvn.jp/en/jp/JVN59503133/index.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"JVN#59503133: Multiple NEC mobile routers vulnerable to cross-site request forgery","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0717","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0717","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"717","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"nec","cpe5":"atermwm3450rn","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"717","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"nec","cpe5":"atermwm3600r","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"717","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"nec","cpe5":"atermwr8160n","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"717","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"nec","cpe5":"atermwr8370n","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"717","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"nec","cpe5":"atermwr8600n","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"717","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"nec","cpe5":"atermwr9500n","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T14:33:05.603Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://jvn.jp/en/jp/JVN59503133/6443/index.html"},{"name":"JVNDB-2013-000024","tags":["third-party-advisory","x_refsource_JVNDB","x_transferred"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://jpn.nec.com/security-info/secinfo/nv13-005.html"},{"name":"JVN#59503133","tags":["third-party-advisory","x_refsource_JVN","x_transferred"],"url":"http://jvn.jp/en/jp/JVN59503133/index.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-03-19T18:00:00.000Z","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","shortName":"jpcert"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://jvn.jp/en/jp/JVN59503133/6443/index.html"},{"name":"JVNDB-2013-000024","tags":["third-party-advisory","x_refsource_JVNDB"],"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024"},{"tags":["x_refsource_CONFIRM"],"url":"http://jpn.nec.com/security-info/secinfo/nv13-005.html"},{"name":"JVN#59503133","tags":["third-party-advisory","x_refsource_JVN"],"url":"http://jvn.jp/en/jp/JVN59503133/index.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vultures@jpcert.or.jp","ID":"CVE-2013-0717","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://jvn.jp/en/jp/JVN59503133/6443/index.html","refsource":"CONFIRM","url":"http://jvn.jp/en/jp/JVN59503133/6443/index.html"},{"name":"JVNDB-2013-000024","refsource":"JVNDB","url":"http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024"},{"name":"http://jpn.nec.com/security-info/secinfo/nv13-005.html","refsource":"CONFIRM","url":"http://jpn.nec.com/security-info/secinfo/nv13-005.html"},{"name":"JVN#59503133","refsource":"JVN","url":"http://jvn.jp/en/jp/JVN59503133/index.html"}]}}}},"cveMetadata":{"assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","assignerShortName":"jpcert","cveId":"CVE-2013-0717","datePublished":"2013-03-19T18:00:00.000Z","dateReserved":"2012-12-28T00:00:00.000Z","dateUpdated":"2024-09-17T02:51:50.999Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-03-19 18:55:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-352","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nec:atermwm3450rn:-:*:*:*:*:*:*:*","matchCriteriaId":"2214321D-ABC8-4FFD-BF33-E1F707386DD5"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:atermwm3600r:-:*:*:*:*:*:*:*","matchCriteriaId":"6D5040C6-5035-46CF-A80C-E2D69A5E3401"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:atermwr8160n:-:*:*:*:*:*:*:*","matchCriteriaId":"36D01D2D-ABD8-47C7-8070-41608AE59DE8"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:atermwr8370n:-:*:*:*:*:*:*:*","matchCriteriaId":"20AB6685-5F0E-46E9-8776-2FBF8ACE8DF4"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:atermwr8600n:-:*:*:*:*:*:*:*","matchCriteriaId":"56589FA6-6A4E-4D47-83BE-9E246E722202"},{"vulnerable":true,"criteria":"cpe:2.3:h:nec:atermwr9500n:-:*:*:*:*:*:*:*","matchCriteriaId":"EC88A006-8AB5-4780-8280-676B34BFE7F4"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"717","Ordinal":"1","Title":"CVE-2013-0717","CVE":"CVE-2013-0717","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"717","Ordinal":"1","NoteData":"Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.","Type":"Description","Title":"CVE-2013-0717"},{"CveYear":"2013","CveId":"717","Ordinal":"2","NoteData":"2013-03-19","Type":"Other","Title":"Published"}]}}}