CVE-2013-0717: Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC A...

Security readout for executives and security teams

This flaw affects several NEC Aterm router models. If an administrator is already authenticated to the router, a malicious website could make their browser send unwanted management requests, such as rebooting the device or initializing settings. The available bundle does not provide a severity score or confirm exploitation. Exposure is limited to environments still using the named NEC Aterm router models and their web management utility. Direct internet exposure is not required for CSRF; the administrator’s browser must be able to reach the router interface while authenticated. Treat as a moderate legacy infrastructure risk. Prioritize remediation where these routers protect business-critical sites, expose management interfaces broadly, or are no longer vendor-supported. Mitigation focus: Inventory networks for the named NEC Aterm router models.; Check NEC and JVN guidance for firmware or supported remediation.; Restrict router management access to trusted administrative networks..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.