CVE-2013-7282

Name of the Vulnerable Software and Affected Versions Nisuta NS-WIR150NE router version 5.07.41 Nisuta NS-WIR300N router version 5.07.36 NIS01

Description The issue allows remote attackers to bypass authentication on the management web interface of the affected routers by using a specific HTTP header, "Cookie: :language=en".

Recommendations For Nisuta NS-WIR150NE router version 5.07.41, consider restricting access to the management web interface until a patch is available. For Nisuta NS-WIR300N router version 5.07.36 NIS01, avoid using the management web interface with the language parameter set to en in the Cookie HTTP header until the issue is resolved. As a temporary workaround, consider disabling remote access to the management web interface on both routers until a fix is provided.