Unrated severityNVD Advisory· Published Dec 12, 2013· Updated Jun 16, 2026

CVE-2013-2752

Description

Cross-site request forgery (CSRF) vulnerability in frontview/lib/np_handler.pl in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to hijack the authentication of users.

Affected products

Netgear/Raidiator2 versions
cpe:2.3:o:netgear:raidiator:*:*:*:*:*:readynas:*:*+ 1 more
- cpe:2.3:o:netgear:raidiator:*:*:*:*:*:readynas:*:*range: >=4.1,<4.1.12
- (no CPE)range: <4.1.12, >=4.2.0 <4.2.24

Patches

Vulnerability mechanics

References

www.readynas.comnvdPatchVendor Advisory
www.tripwire.com/register/security-advisory-netgear-readynas/nvdThird Party Advisory
www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/nvdThird Party Advisory
www.osvdb.org/98825nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000