CVE-2013-0126

CVE-2013-0126 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36. These flaws allow remote attackers to hijack an administrator's authenticated session to perform actions such as adding new administrative accounts or enabling remote administration. The vulnerability has a CVSS score of 6.8, indicating a medium severity, with a network attack vector and moderate attack complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit modules, an exploit is publicly available on ExploitDB (EDB-24860), though community discussion and media coverage are minimal.