What’s Vulnerable › Vulnerabilities
CVE-2013-3690
- Severity: medium (CVSS 6.8 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 12.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2013-10-01 · updated 2026-06-16
- Weakness: CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add users.
Affected products
- Brickcom 100Ap Device Firmware: 3.1.0.8
- Brickcom Fb-100Ap: all versions
- Brickcom Md-100Ap: all versions
- Brickcom Ob-100Ae: all versions
- Brickcom Osd-040E: all versions
- Brickcom Wcb-100Ap: all versions
- Brickcom Wfb-100Ap: all versions
References
Get alerted when CVE-2013-3690 or the next vulnerability affects your stack