CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
33.0%
A vulnerability in the web-based management interface of Cisco Mobility Express Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected device. An attacker could exploit this vulnerability by persuading a user with an active session on an affected device to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions, including modifying the configuration, with the privilege level of the user.
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | aironet_1542i | - | cpe:2.3:h:cisco:aironet_1542i:-:*:*:*:*:*:*:* |
cisco | aironet_1542i_firmware | * | cpe:2.3:o:cisco:aironet_1542i_firmware:*:*:*:*:*:*:*:* |
cisco | aironet_1542i_firmware | 8.10(1.255) | cpe:2.3:o:cisco:aironet_1542i_firmware:8.10\(1.255\):*:*:*:*:*:*:* |
cisco | aironet_1542d | - | cpe:2.3:h:cisco:aironet_1542d:-:*:*:*:*:*:*:* |
cisco | aironet_1542d_firmware | * | cpe:2.3:o:cisco:aironet_1542d_firmware:*:*:*:*:*:*:*:* |
cisco | aironet_1542d_firmware | 8.10(1.255) | cpe:2.3:o:cisco:aironet_1542d_firmware:8.10\(1.255\):*:*:*:*:*:*:* |
cisco | aironet_1562i | - | cpe:2.3:h:cisco:aironet_1562i:-:*:*:*:*:*:*:* |
cisco | aironet_1562i_firmware | * | cpe:2.3:o:cisco:aironet_1562i_firmware:*:*:*:*:*:*:*:* |
cisco | aironet_1562i_firmware | 8.10(1.255) | cpe:2.3:o:cisco:aironet_1562i_firmware:8.10\(1.255\):*:*:*:*:*:*:* |
cisco | aironet_1562e | - | cpe:2.3:h:cisco:aironet_1562e:-:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
33.0%