CVE-2013-3690
brickcom: no CVSS score yet. EPSS 12% chance of exploitation in the next 30 days.
Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add users.
- EPSS
- 12% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- brickcom:100ap_device_firmware
- brickcom:fb-100ap
- brickcom:md-100ap
- brickcom:ob-100ae
- brickcom:osd-040e
- brickcom:wcb-100ap
- brickcom:wfb-100ap