Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-2350
HistoryMar 19, 2015 - 2:59 p.m.

CVE-2015-2350

2015-03-1914:59:02
CWE-352
[email protected]
web.nvd.nist.gov
23
cve-2015-2350
cross-site request forgery
csrf vulnerability
mikrotik routeros
remote attackers
authentication hijacking
administrator password
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.4%

JSON

Cross-site request forgery (CSRF) vulnerability in MikroTik RouterOS 5.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via a request in the status page to /cfg.

Affected configurations

NVD
Node
mikrotikrouterosRange≤5.0

Related

prion 1
cvelist 1
checkpoint_advisories 1
nvd 1
nessus 1
prion
prion
Cross site request forgery (csrf)
2015-03-19 14:59:00
cvelist
cvelist
CVE-2015-2350
2015-03-19 14:00:00
checkpoint_advisories
checkpoint_advisories
MikroTik RouterOS Admin Password Change (CVE-2015-2350)
2016-12-20 00:00:00
nvd
nvd
CVE-2015-2350
2015-03-19 14:59:02
nessus
nessus
MikroTik RouterOS Cross-Site Request Forgery (CVE-2015-2350)
2024-02-27 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.4%

JSON
Related for CVE-2015-2350
prion1cvelist1checkpoint_advisories1nvd1nessus1