Cisco Industrial Ethernet 1000 Series Switches Cross Site Request Forgery Vulnerability
BID:98524
Info
Cisco Industrial Ethernet 1000 Series Switches Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 98524 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-6634 |
| Remote: | Yes |
| Local: | No |
| Published: | May 17 2017 12:00AM |
| Updated: | May 17 2017 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco Industrial Ethernet 1000 Series Switches 0 |
| Not Vulnerable: | |
Discussion
Cisco Industrial Ethernet 1000 Series Switches Cross Site Request Forgery Vulnerability
Cisco Industrial Ethernet 1000 Series Switches are prone to a cross-site request-forgery vulnerability because the application does not properly validate HTTP requests.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected user. Other attacks are also possible.
This issue is being tracked by Cisco bug ID CSCvc88811.
Cisco Industrial Ethernet 1000 Series Switches are prone to a cross-site request-forgery vulnerability because the application does not properly validate HTTP requests.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected user. Other attacks are also possible.
This issue is being tracked by Cisco bug ID CSCvc88811.
Solution / Fix
Cisco Industrial Ethernet 1000 Series Switches Cross Site Request Forgery Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Cisco Industrial Ethernet 1000 Series Switches Cross Site Request Forgery Vulnerability
References:
References: