Cross-Site Request Forgery Vulnerability in Cisco EPC3925 Devices

CVE-2013-6976

Summary

The vulnerability found in Cisco EPC3925 devices via the goform/Quick_setup functionality exposes the devices to cross-site request forgery (CSRF). This flaw allows remote attackers to exploit the authentication process of administrators, potentially enabling them to change passwords without authorization. Through specially crafted requests, an attacker could manipulate the Password and PasswordReEnter parameters, leading to unauthorized access and control of the device settings. Effective mitigation measures should be implemented to safeguard against such attacks.

References