CVEvulnerability

CVE-2015-6401

7.5 HIGH Published 2015-12-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-12-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execute unspecified administrative functions via a crafted HTTP request, aka Bug ID CSCux24941.

Affected configurations

• cisco epc3928 docsis 3.0 8x4 wireless residential gateway with embedded digital voice adapter 5.5.10 • cisco epc3928 docsis 3.0 8x4 wireless residential gateway with embedded digital voice adapter 5.5.11 • cisco epc3928 docsis 3.0 8x4 wireless residential gateway with embedded digital voice adapter 5.7.1

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References