CVE-2013-6976

CVE-2013-6976 involves a CSRF flaw in Cisco EPC3925 devices’ goform/Quick_setup that lets an attacker hijack administrator sessions and change the password via Password and PasswordReEnter. Affected product: Cisco EPC3925 (router). Root cause: cross-site request forgery enabling unauthorized pass...

CVE-2013-6976: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in goform/Quicksetup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password and PasswordReEnter parameters, aka Bug ID CSCuh37496...