CVE-2014-4865

CacheGuard OS 5.7.7 - Cross-Site Request Forgery in Password Admin Interface

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-4865. PoCs published by William Costa.

AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in CacheGuard-OS v5.7.7, allowing an attacker to change the administrator password via a crafted HTML form without requiring a CSRF token.

Description

Cross-site request forgery (CSRF) vulnerability in gui/password-wadmin.apl in CacheGuard OS 5.7.7 allows remote attackers to hijack the authentication of arbitrary users.

Exploits (1)

exploitdb WORKING POC
by William Costa · textwebappslinux
https://www.exploit-db.com/exploits/34672

This exploit demonstrates a CSRF vulnerability in CacheGuard-OS v5.7.7, allowing an attacker to change the administrator password via a crafted HTML form without requiring a CSRF token.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: CacheGuard-OS v5.7.7
No auth needed
Prerequisites: Knowledge of the target device's IP address · Victim must have an authenticated session with the device
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Sep/38
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/241508

Scores

EPSS 0.0124
EPSS Percentile 65.5%

Details

CWE
CWE-352
Status published
Products (1)
cacheguard/cacheguardos 5.7.7
Published Sep 10, 2014
Tracked Since Feb 18, 2026