CVE-2015-6378

Cross-site request forgery (CSRF) vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv05943.

Score

CVSS 2.0 6.8 Medium

Status

Modified - psirt@cisco.com

Published

2015-12-14

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Dpq3925 8x4 Docsis 3.0 Wireless Residential Gateway With Embedded Digital Voice Adapter (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-gateway
• http://www.securitytracker.com/id/1034345