Unscored severity · published Jan 31, 2008
CVE-2008-0524
Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably…
–
CVSS
0.7%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RT
Rt107e · Yamaha
All versions, or not specified · source: NVD
RT
Rt52pro · Yamaha
All versions, or not specified · source: NVD
RT
Rt56v · Yamaha
All versions, or not specified · source: NVD
RT
Rt57i · Yamaha
All versions, or not specified · source: NVD
RT
Rt58i · Yamaha
All versions, or not specified · source: NVD
RT
Rt60w · Yamaha
All versions, or not specified · source: NVD
RT
Rt80i · Yamaha
All versions, or not specified · source: NVD
RT
Rta50i · Yamaha
All versions, or not specified · source: NVD
RT
Rta52i · Yamaha
All versions, or not specified · source: NVD
RT
Rta54i · Yamaha
All versions, or not specified · source: NVD
RT
Rta55i · Yamaha
All versions, or not specified · source: NVD
RT
Rtv700 · Yamaha
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0524
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0524
jvn.jp
http://jvn.jp/jp/JVN%2388575577/index.html
secunia.com
http://secunia.com/advisories/28690
www.rtpro.yamaha.co.jp
http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html
www.securityfocus.com
http://www.securityfocus.com/bid/27491
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/40015
More from Rt107e
–
CVE-2013-7310
The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing…
–
CVE-2011-1323
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header…