CVE-2015-6378

MEDIO 6.8CVE-2015-6378 · Published 14/12/2015 · updated 17/06/2026

In breve

CVE-2015-6378 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda dpq3925 8x4 docsis 3.0 wireless residential gateway with embedded digital voice adapter (cisco).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.82%, superiore al 57.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dpq3925 8x4 docsis 3.0 wireless residential gateway with embedded digital voice adapter cisco	`= 5.5.2`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv05943.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-gateway · Vendor Advisory
securitytracker.com/id/1034345

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free