Cisco Broadband Access Center Telco Wireless Cross Site Request Forgery Vulnerability
BID:67225
Info
Cisco Broadband Access Center Telco Wireless Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 67225 |
| Class: | Design Error |
| CVE: |
CVE-2014-2190 |
| Remote: | Yes |
| Local: | No |
| Published: | May 06 2014 12:00AM |
| Updated: | May 08 2014 07:22AM |
| Credit: | Cisco |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cisco Broadband Access Center Telco Wireless Cross Site Request Forgery Vulnerability
Cisco Broadband Access Center Telco Wireless is prone to a cross-site request-forgery vulnerability due to insufficient CSRF protections.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
This issue is being tracked by Cisco Bug ID CSCuo23804 and CSCuo26389.
Cisco Broadband Access Center Telco Wireless is prone to a cross-site request-forgery vulnerability due to insufficient CSRF protections.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
This issue is being tracked by Cisco Bug ID CSCuo23804 and CSCuo26389.
Exploit / POC
Cisco Broadband Access Center Telco Wireless Cross Site Request Forgery Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
Solution / Fix
Cisco Broadband Access Center Telco Wireless Cross Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco Broadband Access Center Telco Wireless Cross Site Request Forgery Vulnerability
References:
References: