Is CVE-2015-6401 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Cisco Epc3928 Docsis 3.0 8x4 Wireless Residential Gateway With Embedded Digital Voice Adapter

CVE-2015-6401

Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execute unspecified administrative functions via a crafted HTTP request, aka Bug ID CSCux24941.

Vulnerability class: Broken Authentication

EPSS: 0.076 (93.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Epc3928_docsis_3.0_8x4_wireless_residential_gateway_with_embedded_digital_voice_adapter — versions 5.5.10, 5.5.11, 5.7.1
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

psirt@cisco.com (exploit, x_refsource_EXPLOIT-DB)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2015-6401?: CVE-2015-6401 is a vulnerability in Cisco Epc3928 Docsis 3.0 8x4 Wireless Residential Gateway With Embedded Digital Voice Adapter, classified under Improper Authentication. Published 2015-12-14.
Is CVE-2015-6401 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.