返回 CVE 浏览器

CVE-2015-4257

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0340%

EPSS Percentile24.11th

Published2015年7月10日

Last Modified2026年5月6日

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability on Cisco TelePresence MCU 4500 devices with software 4.5(1.55) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu90710.

Affected Platforms (CPE)

📦

Cisco

Telepresence Mcu Software

= 4.5\(1.55\)

References & Advisories

🔗 http://tools.cisco.com/security/center/viewAlert.x?alertId=39801

🔗 http://www.securitytracker.com/id/1032838

🔗 http://tools.cisco.com/security/center/viewAlert.x?alertId=39801

🔗 http://www.securitytracker.com/id/1032838

相关漏洞威胁

CVE-2017-37929.8

A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could al...

CVE-2015-07139.0

The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Ser...

CVE-2014-33977.8

The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory...

CVE-2015-06217.8

Cisco TelePresence MCU devices with software 4.5(1.45) allow remote attackers to cause a denial of service (device reload) via an ...