CVE-2013-2752

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-12 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in frontview/lib/np_handler.pl in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to hijack the authentication of users.

Affected products

NETGEAR Raidiator: from 4.1 before 4.1.12; from 4.2 before 4.2.24 — fixed in 4.1.12, 4.2.24

How to fix

Upgrade to a fixed version: NETGEAR Raidiator 4.1.12, 4.2.24. Check the vendor advisory for mitigations.

References

http://www.osvdb.org/98825
http://www.readynas.com/?p=7002
http://www.tripwire.com/register/security-advisory-netgear-readynas/
http://www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/
http://www.osvdb.org/98825
http://www.readynas.com/?p=7002
http://www.tripwire.com/register/security-advisory-netgear-readynas/
http://www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/

Get alerted when CVE-2013-2752 or the next vulnerability affects your stack