Lucene search
CiscoCVE-2015-6378HistoryDec 14, 2015 - 3:59 a.m.
CVE-2015-6378
2015-12-1403:59:00
CWE-352
cisco
web.nvd.nist.gov
24
cve-2015-6378
csrf
cisco
dpq3925
edva 5.5.2
remote attackers
authentication hijacking
bug id cscuv05943
nvd
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.001
Percentile
39.6%
Cross-site request forgery (CSRF) vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv05943.
Affected configurations
Node
ciscodpq3925_8x4_docsis_3.0_wireless_residential_gateway_with_embedded_digital_voice_adapterMatch5.5.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | dpq3925_8x4_docsis_3.0_wireless_residential_gateway_with_embedded_digital_voice_adapter | 5.5.2 | cpe:2.3:a:cisco:dpq3925_8x4_docsis_3.0_wireless_residential_gateway_with_embedded_digital_voice_adapter:5.5.2:*:*:*:*:*:*:* |
Related
cisco
cisco
Cisco Residential Gateway Devices Cross-Site Request Forgery Vulnerability
2015-12-08 00:00:00
prion
prion
Cross site request forgery (csrf)
2015-12-14 03:59:00
cvelist
cvelist
CVE-2015-6378
2015-12-14 02:00:00
nvd
nvd
CVE-2015-6378
2015-12-14 03:59:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.001
Percentile
39.6%
Related for CVE-2015-6378