VULNERABILITY INTELLIGENCE

CVE-2013-5039

CVSS score5.4 MEDIUM
EPSS probability2.13%
CISA KEVNot currently listed
Published2013-12-30
Last modified2026-06-16
CVSS vectorAV:A/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in goform/wlanBasicSecurity on the HOT HOTBOX router with software 2.1.11 allows remote attackers to hijack the authentication of administrators for requests that change the WiFi Security field to Deactivated via the WifiSecurity parameter.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references