CVE:CVE-2013-3963
CNNVD:CNNVD-201306-258
Grandstream GXV3501等都是美国潮流网络(Grandstream)公司的网络摄像机产品。
Grandstream网络摄像机中的goform/usermanage文件中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞劫持任意添加用户请求的身份认证。以下型号受到影响：GXV3501，GXV3504，GXV3601，GXV3601HD/LL，GXV3611HD/LL，GXV3615W/P，GXV3651FHD，GXV3662HD，GXV3615WP_HD，GXV3500。
solution:Upgrade grandstream gxv_device_firmware to a higher version than 1.0.4.43,1.0.2.3,1.0.3.9,1.0.4.6,1.0.4.7,1.0.4.11,1.0.4.16,1.0.4.27,1.0.4.34,1.0.4.37,1.0.4.38,1.0.4.39,1.0.4.42,and avoid the version (,1.0.4.43],1.0.2.3,1.0.3.9,1.0.4.6,1.0.4.7,1.0.4.11,1.0.4.16,1.0.4.27,1.0.4.34,1.0.4.37,1.0.4.38,1.0.4.39,1.0.4.42; Upgrade grandstream gxv3500 to a higher version than -; Upgrade grandstream gxv3501 to a higher version than -; Upgrade grandstream gxv3504 to a higher version than -; Upgrade grandstream gxv3601 to a higher version than -; Upgrade grandstream gxv3601hd/ll to a higher version than -; Upgrade grandstream gxv3611hd/ll to a higher version than -; Upgrade grandstream gxv3615w/p to a higher version than -; Upgrade grandstream gxv3615wp_hd to a higher version than -; Upgrade grandstream gxv3651fhd to a higher version than -; Upgrade grandstream gxv3662hd to a higher version than -