CVE Feed

    Dashboard / CVE / CVE-2013-3963

    CVE-2013-3963

    Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models allows remote attackers to hijack the authentication of unspecified victims for requests that add users.

    Published:Oct 1, 2013
    Last Modified:Apr 11, 2025
    EPS:Oct 1, 2013
    EPSS Score:0.00365
    CVSS Score:6.8

    Affected Products

    Vendor
    Grandstream
    Product
    Gxv3500
    Vendor
    Grandstream
    Product
    Gxv3501
    Vendor
    Grandstream
    Product
    Gxv3504
    Vendor
    Grandstream
    Product
    Gxv3601
    Vendor
    Grandstream
    Product
    Gxv3601hd\/ll
    Vendor
    Grandstream
    Product
    Gxv3611hd\/ll
    Vendor
    Grandstream
    Product
    Gxv3615w\/p
    Vendor
    Grandstream
    Product
    Gxv3615wp Hd
    Vendor
    Grandstream
    Product
    Gxv3651fhd
    Vendor
    Grandstream
    Product
    Gxv3662hd
    Vendor
    Grandstream
    Product
    Gxv Device Firmware

    Exploits

    https://www.exploit-db.com/exploits/38584

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High