Lucene search

K
cveCiscoCVE-2015-4258
HistoryJul 10, 2015 - 12:59 a.m.

CVE-2015-4258

2015-07-1000:59:05
CWE-352
cisco
web.nvd.nist.gov
35
cve-2015-4258
csrf vulnerability
cisco telepresence
mse 8000
remote attackers
authentication hijack
bug id cscuu90444
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

32.7%

Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MSE 8000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90444.

Affected configurations

Nvd
Node
ciscotelepresence_mse_8000_seriesMatch-
VendorProductVersionCPE
ciscotelepresence_mse_8000_series-cpe:2.3:h:cisco:telepresence_mse_8000_series:-:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

32.7%

Related for CVE-2015-4258