CVE-2008-0524 Cross-site request forgery in n/a
Remote attackers can change router passwords and settings via CSRF, requiring admin interaction, affecting Yamaha RT series routers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2008-0524?
CVE-2008-0524 is a high-severity vulnerability in n/a, published on 31 Jan 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors.
Weakness: CWE-352
Which versions are affected by CVE-2008-0524?
It affects 18 products.
Products include Yamaha Rt107e, Yamaha Rt52pro, Yamaha Rt56v, Yamaha Rt57i, Yamaha Rt58i, Yamaha Rt60w and 12 more.
How do I fix CVE-2008-0524?
No fix has been published for CVE-2008-0524 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-0524 being exploited?
There is no known exploitation of CVE-2008-0524 in the wild and no public exploit code.
Sources
Also known as GHSA-73v2-jpg5-227f.