CVE-2016-4854

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-05-22 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors.

Affected products

NTT DOCOMO, INC. L-04D: v10a, v10b

References

http://jvndb.jvn.jp/jvndb/JVNDB-2016-000194
http://www.securityfocus.com/bid/93278
https://jvn.jp/en/jp/JVN46351856/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000194
http://www.securityfocus.com/bid/93278
https://jvn.jp/en/jp/JVN46351856/index.html

Get alerted when CVE-2016-4854 or the next vulnerability affects your stack