CVE-2016-1158

Description

Cross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices allows remote attackers to hijack the authentication of administrators for requests that perform administrative functions.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://corega.jp/support/security/20160229_wlbargmh_wlbargnl.htm
• http://jvn.jp/en/jp/JVN59349382/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000032
• http://corega.jp/support/security/20160229_wlbargmh_wlbargnl.htm
• http://jvn.jp/en/jp/JVN59349382/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000032

CWEs

CWE-352

💬 Discuss CVE-2016-1158 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.