CVE-2013-7282

Nisuta NS-WIR150NE/NS-WIR300N - Auth Bypass

Title source: llm

Description

The management web interface on the Nisuta NS-WIR150NE router with firmware 5.07.41 and Nisuta NS-WIR300N router with firmware 5.07.36_NIS01 allows remote attackers to bypass authentication via a "Cookie: :language=en" HTTP header.

Exploits (1)

exploitdb WORKING POC

by Amplia Security Advisories · textwebappshardware

https://www.exploit-db.com/exploits/30665

View Code ZIP pw:eip

References (2)

[Exploit] http://www.ampliasecurity.com/advisories/AMPLIA-ARA050913.txt

[Exploit] http://www.ampliasecurity.com/advisories/nisuta-nswir150ne-nswir300n-wireless-router-remote-management-web-interface-authentication-bypass-vulnerability.html

Scores

EPSS 0.0439

EPSS Percentile 88.8%

Classification

CWE

CWE-287

Status draft

Affected Products (4)

nisuta/ns-wir150ne_firmware

nisuta/ns-wir150ne

nisuta/ns-wir300n_firmware

nisuta/ns-wir300n

Timeline

Published Jan 10, 2014

Tracked Since Feb 18, 2026