CVE-2016-1139

High

Published: 30/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A cross-site request forgery (CSRF) vulnerability exists in KDDI HOME SPOT CUBE devices before version 2, allowing remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Risk Assessment

This vulnerability may lead to unauthorized access to user accounts, posing a serious threat to data security within the organization.

Recommendation

It is recommended to update KDDI HOME SPOT CUBE devices to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in KDDI HOME SPOT CUBE

CVE-2016-1137High
There is an open redirect vulnerability in KDDI HOME SPOT CUBE devices before version 2 that allows remote attackers to redirect users to arbitrary websites.

Original NVD description (English source)

Cross-site request forgery (CSRF) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.