CVE-2013-3963
Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models allows remote attackers to hijack the authentication of unspecified victims for requests that add users.
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
- CWE
- CWE-352
- Published
- Modified
- Record from
- the NVD, synced
Affected
- grandstream:gxv3500
- grandstream:gxv3501
- grandstream:gxv3504
- grandstream:gxv3601
- grandstream:gxv3601hd\/ll
- grandstream:gxv3611hd\/ll
- grandstream:gxv3615w\/p
- grandstream:gxv3615wp_hd
- grandstream:gxv3651fhd
- grandstream:gxv3662hd
- grandstream:gxv_device_firmware