CVE-2015-2905 Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary...
MediumCVSS 6.8
EPSS 0.66%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| actiontec ncs01 firmware | <= 1.0.12 | No fix listed |
References
- VU#335192 third-party-advisory us-government-resource