High severity8.8NVD Advisory· Published May 22, 2017· Updated May 13, 2026
CVE-2016-4854
CVE-2016-4854
Description
Cross-site request forgery (CSRF) vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors.
Affected products
3cpe:2.3:o:nttdocomo:l-04d_firmware:v10a:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:nttdocomo:l-04d_firmware:v10a:*:*:*:*:*:*:*
- cpe:2.3:o:nttdocomo:l-04d_firmware:v10b:*:*:*:*:*:*:*
- NTT DOCOMO, INC./L-04Dv5Range: firmware version V10a and V10b
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- jvndb.jvn.jp/jvndb/JVNDB-2016-000194nvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/93278nvdThird Party AdvisoryVDB Entry
- jvn.jp/en/jp/JVN46351856/index.htmlnvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.