← back
CVE-2015-6401

CVE-2015-6401

EPSS 8.0%
Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execute unspecified administrative functions via a crafted HTTP request, aka Bug ID CSCux24941.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/39904/unverifiedexploitdbwww.exploit-db.com/exploits/39904unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.exploit-db.com/exploits/39904/http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-cwrhttp://www.securitytracker.com/id/1034347