High severity8.8NVD Advisory· Published Jun 9, 2017· Updated May 13, 2026

CVE-2016-7809

Description

Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors.

Affected products

Corega/Cg Wlr300nx Firmware
cpe:2.3:o:corega:cg-wlr300nx_firmware:*:*:*:*:*:*:*:*
Range: <=1.20
Corega Inc/CG-WLR300NXv5
Range: firmware Ver. 1.20 and earlier

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

corega.jp/support/security/20161111_wlr300nx.htmnvdVendor Advisory
www.securityfocus.com/bid/94248nvdThird Party AdvisoryVDB Entry
jvn.jp/en/jp/JVN23823838/index.htmlnvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000