Lucene search
CiscoCVE-2015-6401HistoryDec 14, 2015 - 3:59 a.m.
CVE-2015-6401
2015-12-1403:59:01
CWE-287
cisco
web.nvd.nist.gov
29
cve-2015-6401
cisco
epc3928
edva
bug id cscux24941
remote code execution
authentication bypass
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
High
EPSS
0.003
Percentile
68.7%
Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execute unspecified administrative functions via a crafted HTTP request, aka Bug ID CSCux24941.
Affected configurations
Node
ciscoepc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapterMatch5.5.10
ORciscoepc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapterMatch5.5.11
ORciscoepc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapterMatch5.7.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | epc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapter | 5.5.10 | cpe:2.3:o:cisco:epc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapter:5.5.10:*:*:*:*:*:*:* |
| cisco | epc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapter | 5.5.11 | cpe:2.3:o:cisco:epc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapter:5.5.11:*:*:*:*:*:*:* |
| cisco | epc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapter | 5.7.1 | cpe:2.3:o:cisco:epc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapter:5.7.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-6401
2015-12-14 02:00:00
nvd
nvd
CVE-2015-6401
2015-12-14 03:59:01
prion
prion
Authentication flaw
2015-12-14 03:59:00
cisco
cisco
Cisco Wireless Residential Unauthorized Command Vulnerability
2015-12-08 00:00:00
exploitpack
exploitpack
Cisco EPC 3928 - Multiple Vulnerabilities
2016-06-07 00:00:00
exploitdb
exploitdb
Cisco EPC 3928 - Multiple Vulnerabilities
2016-06-07 00:00:00
zdt
zdt
Cisco EPC 3928 - Multiple Vulnerabilities
2016-06-06 00:00:00
packetstorm
packetstorm
Cisco EPC 3928 XSS / DoS / Command Execution
2016-06-08 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.8
Confidence
High
EPSS
0.003
Percentile
68.7%
Related for CVE-2015-6401