CVE-2013-3690: Brickcom 100ap Device Firmware

Medium severity, CVSS 6.8. EPSS: 12.4% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in cgi-bin/users.cgi in Brickcom FB-100Ap, WCB-100Ap, MD-100Ap, WFB-100Ap, OB-100Ae, OSD-040E, and possibly other camera models with firmware 3.1.0.8 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add users.

Affected products

• Brickcom 100ap Device Firmware: version 3.1.0.8 only
• Brickcom Fb-100ap
• Brickcom Md-100ap
• Brickcom Ob-100ae
• Brickcom Osd-040e
• Brickcom Wcb-100ap
• Brickcom Wfb-100ap

Published 2013-10-01. Last modified 2026-06-16.