Lucene search

JpcertCVE-2016-1139

HistoryJan 30, 2016 - 3:59 p.m.

CVE-2016-1139

2016-01-3015:59:04

CWE-352

jpcert

web.nvd.nist.gov

cve

2016

1139

csrf

vulnerability

kddi

home spot cube

nvd

security

authentication

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

Cross-site request forgery (CSRF) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected configurations

Nvd

Node

kddihome_spot_cube_firmwareMatch2.0

AND

kddihome_spot_cube

VendorProductVersionCPE
kddihome_spot_cube_firmware2.0cpe:2.3:o:kddi:home_spot_cube_firmware:2.0:*:*:*:*:*:*:*
kddihome_spot_cube*cpe:2.3:h:kddi:home_spot_cube:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kddi	home_spot_cube_firmware	2.0	cpe:2.3:o:kddi:home_spot_cube_firmware:2.0:::::::*
kddi	home_spot_cube	*	cpe:2.3:h:kddi:home_spot_cube::::::::

References

jvn.jp/en/jp/JVN54686544/index.html

jvndb.jvn.jp/jvndb/JVNDB-2016-000010

www.au.kddi.com/mobile/service/smartphone/wifi/homespot/#anc06

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.002

Percentile

52.2%

JSON

Related for CVE-2016-1139