CVE-2015-4586

Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL Firmware 1.0.0.20h.HOL - CSRF via User Account Creation

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an add_user action in a request to password.cmd.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/75384

Exploit x_refsource_misc

http://packetstormsecurity.com/files/132324/CellPipe-7130-Cross-Site-Request-Forgery.html

Scores

EPSS 0.0093

EPSS Percentile 56.3%

Details

CWE

CWE-352

Status published

Products (1)

alcatel-lucent/cellpipe_7130_rg_5ae.m2013_hol_firmware 1.0.0.20h.hol

Published Jun 23, 2015

Tracked Since Feb 18, 2026