CVE-2013-3539

Published: Oct 1, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.

Affected (11)

Products: Ovislink: Airlive Wl2600cam · Sony: Snc Ch140, Snc Ch180, Snc Ch240, Snc Ch280, Snc Dh140, Snc Dh140t, Snc Dh180, Snc Dh240, Snc Dh240t, Snc Dh280

1 product

10 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Ovislink Airlive Wl2600cam	All versions
Sony Snc Ch140	All versions
Sony Snc Ch180	All versions
Sony Snc Ch240	All versions
Sony Snc Ch280	All versions
Sony Snc Dh140	All versions
Sony Snc Dh140t	All versions
Sony Snc Dh180	All versions
Sony Snc Dh240	All versions
Sony Snc Dh240t	All versions
Sony Snc Dh280	All versions

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

http://seclists.org/fulldisclosure/2013/Jun/84

Source: cve@mitre.org

Exploit

http://seclists.org/fulldisclosure/2013/Jun/84

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.