Multiple Alcatel-Lucent OmniSwitch Products CVE-2015-2805 Cross Site Request Forgery Vulnerability
BID:75121
Info
Multiple Alcatel-Lucent OmniSwitch Products CVE-2015-2805 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 75121 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-2805 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 10 2015 12:00AM |
| Updated: | Jun 10 2015 12:00AM |
| Credit: | RedTeam Pentesting GmbH |
| Vulnerable: |
Alcatel-Lucent OmniSwitch 9000E 8.1.1.R01 Alcatel-Lucent OmniSwitch 9000E 7.3.4.R01 Alcatel-Lucent OmniSwitch 9000E 7.3.3.R01 Alcatel-Lucent OmniSwitch 9000E 7.3.2.R01 Alcatel-Lucent OmniSwitch 9000E 6.6.5.R02 Alcatel-Lucent OmniSwitch 9000E 6.6.4.R01 Alcatel-Lucent OmniSwitch 9000E 6.4.6.R01 Alcatel-Lucent OmniSwitch 9000E 6.4.5.R02 Alcatel-Lucent OmniSwitch 6900 8.1.1.R01 Alcatel-Lucent OmniSwitch 6900 7.3.4.R01 Alcatel-Lucent OmniSwitch 6900 7.3.3.R01 Alcatel-Lucent OmniSwitch 6900 7.3.2.R01 Alcatel-Lucent OmniSwitch 6900 6.6.5.R02 Alcatel-Lucent OmniSwitch 6900 6.6.4.R01 Alcatel-Lucent OmniSwitch 6900 6.4.6.R01 Alcatel-Lucent OmniSwitch 6900 6.4.5.R02 Alcatel-Lucent OmniSwitch 6860 8.1.1.R01 Alcatel-Lucent OmniSwitch 6860 7.3.4.R01 Alcatel-Lucent OmniSwitch 6860 7.3.3.R01 Alcatel-Lucent OmniSwitch 6860 7.3.2.R01 Alcatel-Lucent OmniSwitch 6860 6.6.5.R02 Alcatel-Lucent OmniSwitch 6860 6.6.4.R01 Alcatel-Lucent OmniSwitch 6860 6.4.6.R01 Alcatel-Lucent OmniSwitch 6860 6.4.5.R02 Alcatel-Lucent OmniSwitch 6855 8.1.1.R01 Alcatel-Lucent OmniSwitch 6855 7.3.4.R01 Alcatel-Lucent OmniSwitch 6855 7.3.3.R01 Alcatel-Lucent OmniSwitch 6855 7.3.2.R01 Alcatel-Lucent OmniSwitch 6855 6.6.5.R02 Alcatel-Lucent OmniSwitch 6855 6.6.4.R01 Alcatel-Lucent OmniSwitch 6855 6.4.6.R01 Alcatel-Lucent OmniSwitch 6855 6.4.5.R02 Alcatel-Lucent OmniSwitch 6850E 8.1.1.R01 Alcatel-Lucent OmniSwitch 6850E 7.3.4.R01 Alcatel-Lucent OmniSwitch 6850E 7.3.3.R01 Alcatel-Lucent OmniSwitch 6850E 7.3.2.R01 Alcatel-Lucent OmniSwitch 6850E 6.6.5.R02 Alcatel-Lucent OmniSwitch 6850E 6.6.4.R01 Alcatel-Lucent OmniSwitch 6850E 6.4.6.R01 Alcatel-Lucent OmniSwitch 6850E 6.4.5.R02 Alcatel-Lucent OmniSwitch 6450 8.1.1.R01 Alcatel-Lucent OmniSwitch 6450 7.3.4.R01 Alcatel-Lucent OmniSwitch 6450 7.3.3.R01 Alcatel-Lucent OmniSwitch 6450 7.3.2.R01 Alcatel-Lucent OmniSwitch 6450 6.6.5.R02 Alcatel-Lucent OmniSwitch 6450 6.6.4.R01 Alcatel-Lucent OmniSwitch 6450 6.4.6.R01 Alcatel-Lucent OmniSwitch 6450 6.4.5.R02 Alcatel-Lucent OmniSwitch 6400 8.1.1.R01 Alcatel-Lucent OmniSwitch 6400 7.3.4.R01 Alcatel-Lucent OmniSwitch 6400 7.3.3.R01 Alcatel-Lucent OmniSwitch 6400 7.3.2.R01 Alcatel-Lucent OmniSwitch 6400 6.6.5.R02 Alcatel-Lucent OmniSwitch 6400 6.6.4.R01 Alcatel-Lucent OmniSwitch 6400 6.4.6.R01 Alcatel-Lucent OmniSwitch 6400 6.4.5.R02 Alcatel-Lucent OmniSwitch 6250 8.1.1.R01 Alcatel-Lucent OmniSwitch 6250 7.3.4.R01 Alcatel-Lucent OmniSwitch 6250 7.3.3.R01 Alcatel-Lucent OmniSwitch 6250 7.3.2.R01 Alcatel-Lucent OmniSwitch 6250 6.6.5.R02 Alcatel-Lucent OmniSwitch 6250 6.6.4.R01 Alcatel-Lucent OmniSwitch 6250 6.4.6.R01 Alcatel-Lucent OmniSwitch 6250 6.4.5.R02 Alcatel-Lucent OmniSwitch 10K 8.1.1.R01 Alcatel-Lucent OmniSwitch 10K 7.3.4.R01 Alcatel-Lucent OmniSwitch 10K 7.3.3.R01 Alcatel-Lucent OmniSwitch 10K 7.3.2.R01 Alcatel-Lucent OmniSwitch 10K 6.6.5.R02 Alcatel-Lucent OmniSwitch 10K 6.6.4.R01 Alcatel-Lucent OmniSwitch 10K 6.4.6.R01 Alcatel-Lucent OmniSwitch 10K 6.4.5.R02 |
| Not Vulnerable: | |
Exploit / POC
Multiple Alcatel-Lucent OmniSwitch Products CVE-2015-2805 Cross Site Request Forgery Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
Solution / Fix
Multiple Alcatel-Lucent OmniSwitch Products CVE-2015-2805 Cross Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.