CVE-2018-25155

Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft a malicious web page that automatically submits password change requests to the device when a logged-in user visits the page.

Score

CVSS 4.0 5.1 Medium

Status

Modified - disclosure@vulncheck.com

Published

2025-12-24

Last modified

2026-03-05

Weaknesses

CWE-352

Affected products

• Slice Firmware (Teradek)

References

• https://www.exploit-db.com/exploits/44676
• https://www.teradek.com
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5467.php