CVE-2018-25155
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
4.3 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Vulnerability Description
Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft a malicious web page that automatically submits password change requests to the device when a logged-in user visits the page.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-352
Source
NVD
Vendor
teradek
Product
slice_firmware
Discussion (0)
Add Comment
No comments yet. Be the first!