PT-2015-3208 · Amped Wireless · Amped Wireless R10000

Joel Land · Publicado 2015-12-31 · Atualizado 2016-11-28 · CVE-2015-7278

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Amped Wireless R10000 version 2.5.2.11

Description The issue is related to a cross-site request forgery (CSRF) vulnerability, which allows remote attackers to hijack the authentication of arbitrary users. This can enable an attacker to access authentication data of users.

Recommendations For version 2.5.2.11, as a temporary workaround, consider restricting access to sensitive features until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

BDU:2016-00928

CVE-2015-7278

Produtos afetados

Amped Wireless R10000

Referências · 4

• http://securityfocus.com/bid/78818 · Nota
• https://bdu.fstec.ru/vul/2016-00928 · Nota de Segurança
• https://kb.cert.org/vuls/id/763576 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7278 · Nota de Segurança