CSRF in Cisco Telepresence Advanced Media Gateway
CVE-2015-4254
Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence Advanced Media Gateway devices with software 1.1(1.40) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90732.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (45.9th percentile) — read the EPSS interpretation.
Affected products
- Cisco Telepresence_advanced_media_gateway — versions 1.1\(1.40\), 1.1(1.40)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)