RETIRED: Adtran Netvanta 7100 and 7060 CVE-2013-5210 Multiple Security Vulnerabilities
BID:62754
Info
RETIRED: Adtran Netvanta 7100 and 7060 CVE-2013-5210 Multiple Security Vulnerabilities
| Bugtraq ID: | 62754 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 27 2013 12:00AM |
| Updated: | Oct 04 2013 12:15AM |
| Credit: | Reported by vendor and J. Oquendo. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
RETIRED: Adtran Netvanta 7100 and 7060 CVE-2013-5210 Multiple Security Vulnerabilities
Adtran Netvanta 7100 and 7060 are prone to a cross-site scripting vulnerability and an session renegotiation vulnerability.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials or perform limited man-in-the-middle attacks against vulnerable applications. This may help the attacker to disclose sensitive information and launch other attacks.
Note: This BID is being retired as a duplicate of the issue discussed in BID 62498 (Adtran Netvanta 7100 and 7060 CVE-2013-5210 Multiple Security Vulnerabilities).
Adtran Netvanta 7100 and 7060 are prone to a cross-site scripting vulnerability and an session renegotiation vulnerability.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials or perform limited man-in-the-middle attacks against vulnerable applications. This may help the attacker to disclose sensitive information and launch other attacks.
Note: This BID is being retired as a duplicate of the issue discussed in BID 62498 (Adtran Netvanta 7100 and 7060 CVE-2013-5210 Multiple Security Vulnerabilities).
Exploit / POC
RETIRED: Adtran Netvanta 7100 and 7060 CVE-2013-5210 Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
An attacker can exploit the cross-site scripting issue by enticing an unsuspecting user to follow a malicious URI.
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
An attacker can exploit the cross-site scripting issue by enticing an unsuspecting user to follow a malicious URI.
Solution / Fix
RETIRED: Adtran Netvanta 7100 and 7060 CVE-2013-5210 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
RETIRED: Adtran Netvanta 7100 and 7060 CVE-2013-5210 Multiple Security Vulnerabilities
References:
References: