Cisco EPC3925 Router 'Quick_setup' Cross Site Request Forgery Vulnerability

Bugtraq ID:	64341
Class:	Design Error
CVE:	CVE-2013-6976
Remote:	Yes
Local:	No
Published:	Dec 16 2013 12:00AM
Updated:	Dec 25 2013 12:48AM
Credit:	Jeroen - IT Nerdbox
Vulnerable:
Not Vulnerable:

Cisco EPC3925 Router 'Quick_setup' Cross Site Request Forgery Vulnerability

Cisco EPC3925 router is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain administrative actions and compromise the affected device.

This issue is being tracked by Cisco Bug IDs CSCuh37496.

Cisco EPC3925 Router 'Quick_setup' Cross Site Request Forgery Vulnerability

To exploit the issue an attacker must entice a user into visiting a malicious site.

Cisco EPC3925 Router 'Quick_setup' Cross Site Request Forgery Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco EPC3925 Router 'Quick_setup' Cross Site Request Forgery Vulnerability

References:

• Cisco Homepage (Cisco)