What’s Vulnerable › Vulnerabilities

CVE-2013-0717

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-03-19 · updated 2026-06-16
• Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN routers allow remote attackers to hijack the authentication of administrators for requests that (1) initialize settings or (2) reboot the device.

Affected products

• NEC Atermwm3450Rn: all versions
• NEC Atermwm3600R: all versions
• NEC Atermwr8160N: all versions
• NEC Atermwr8370N: all versions
• NEC Atermwr8600N: all versions
• NEC Atermwr9500N: all versions

References

• http://jpn.nec.com/security-info/secinfo/nv13-005.html
• http://jvn.jp/en/jp/JVN59503133/6443/index.html
• http://jvn.jp/en/jp/JVN59503133/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024
• http://jpn.nec.com/security-info/secinfo/nv13-005.html
• http://jvn.jp/en/jp/JVN59503133/6443/index.html
• http://jvn.jp/en/jp/JVN59503133/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000024

Get alerted when CVE-2013-0717 or the next vulnerability affects your stack