CVE-2016-4854

Cross-site request forgery (CSRF) vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors.

Score

CVSS 3.0 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2017-05-22

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• L-04d (Ntt Docomo Inc.)
• L-04d Firmware (Nttdocomo)

References

• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000194
• http://www.securityfocus.com/bid/93278
• https://jvn.jp/en/jp/JVN46351856/index.html