CVE-2015-7278 - Cross-site request forgery (CSRF) vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users

Back Back to CVE browser

HIGH

Cross-site request forgery (CSRF) vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users

Published Dec 31, 2015

8.8

HIGH

CVSS 3.0

EPSS 0.59%

Description

Cross-site request forgery (CSRF) vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

http://www.securityfocus.com/bid/78818
vdb-entryx_refsource_BID
https://www.kb.cert.org/vuls/id/763576
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/78818		vdb-entryx_refsource_BID
https://www.kb.cert.org/vuls/id/763576		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner certcc

Published Dec 31, 2015

Updated Aug 6, 2024

Reserved Sep 18, 2015

Link CVE-2015-7278

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-7278

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-7278