CVE-2013-6976

Опубликовано: 19 дек. 2013

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password and PasswordReEnter parameters, aka Bug ID CSCuh37496.

Ссылки

http://osvdb.org/101097
http://packetstormsecurity.com/files/124449/Cisco-EPC3925-Cross-Site-Request-Forgery.html
Exploit
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/30362/
Exploit
Third Party Advisory
VDB Entry
http://www.nerdbox.it/cisco-epc3925-csrf-vulnerability/
Broken Link
http://www.securityfocus.com/bid/64341
Third Party Advisory
VDB Entry
http://osvdb.org/101097
http://packetstormsecurity.com/files/124449/Cisco-EPC3925-Cross-Site-Request-Forgery.html
Exploit
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/30362/
Exploit
Third Party Advisory
VDB Entry
http://www.nerdbox.it/cisco-epc3925-csrf-vulnerability/
Broken Link
http://www.securityfocus.com/bid/64341
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:h:cisco:epc3925:-:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.0083

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-pwhf-4xj4-5qg8

github

больше 3 лет назад