High severity8.8NVD Advisory· Published May 22, 2017· Updated Jun 17, 2026

CVE-2016-4854

Description

Cross-site request forgery (CSRF) vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nttdocomo/L 04d Firmware2 versions
cpe:2.3:o:nttdocomo:l-04d_firmware:v10a:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:nttdocomo:l-04d_firmware:v10a:*:*:*:*:*:*:*
- cpe:2.3:o:nttdocomo:l-04d_firmware:v10b:*:*:*:*:*:*:*
L 04D/L-04D firmwarellm-create
Range: V10a, V10b
NTT DOCOMO, INC./L-04Dv5
Range: firmware version V10a and V10b

Patches

Vulnerability mechanics

References

jvndb.jvn.jp/jvndb/JVNDB-2016-000194nvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/93278nvdThird Party AdvisoryVDB Entry
jvn.jp/en/jp/JVN46351856/index.htmlnvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000