CVE-2006-5175

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2006-5175
Cross-site request forgery (CSRF) vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors.

7.6 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 4.9 / Impact : 10.0

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://jvn.jp/jp/JVN%2393484133/index.html Third Party Advisory
http://secunia.com/advisories/22248 Third Party Advisory
http://www.vupen.com/english/advisories/2006/3891 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/29338 Third Party Advisory
http://jvn.jp/jp/JVN%2393484133/index.html Third Party Advisory
http://secunia.com/advisories/22248 Third Party Advisory
http://www.vupen.com/english/advisories/2006/3891 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/29338 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:buffalo-technology:terastation_hd-htgl_firmware:*:*:*:*:*:*:*:*
History

02 May 2025, 12:11

Type Values Removed Values Added
References () http://jvn.jp/jp/JVN%2393484133/index.html - () http://jvn.jp/jp/JVN%2393484133/index.html - Third Party Advisory
References () http://secunia.com/advisories/22248 - Vendor Advisory () http://secunia.com/advisories/22248 - Third Party Advisory
References () http://www.vupen.com/english/advisories/2006/3891 - () http://www.vupen.com/english/advisories/2006/3891 - Broken Link
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/29338 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/29338 - Third Party Advisory
CPE cpe:2.3:h:buffalotech:terastation_hd-htgl_firmware:2.05_beta1:*:*:*:*:*:*:* cpe:2.3:o:buffalo-technology:terastation_hd-htgl_firmware:*:*:*:*:*:*:*:*
First Time Buffalo-technology terastation Hd-htgl Firmware
Buffalo-technology

21 Nov 2024, 00:18

Type Values Removed Values Added
References () http://jvn.jp/jp/JVN%2393484133/index.html - () http://jvn.jp/jp/JVN%2393484133/index.html -
References () http://secunia.com/advisories/22248 - Vendor Advisory () http://secunia.com/advisories/22248 - Vendor Advisory
References () http://www.vupen.com/english/advisories/2006/3891 - () http://www.vupen.com/english/advisories/2006/3891 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/29338 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/29338 -
Information

Published : 2006-10-10 04:06

Updated : 2025-05-02 12:11

NVD link : CVE-2006-5175

Mitre link : CVE-2006-5175

CVE.ORG link : CVE-2006-5175

JSON object : View

Products Affected

buffalo-technology

  • terastation_hd-htgl_firmware
CWE
CWE-352

Cross-Site Request Forgery (CSRF)