Cross-Site Request Forgery Vulnerability in Cisco TelePresence Advanced Media Gateway
CVE-2015-4254

Currently unrated

Key Information:

Vendor
Cisco
Status
Telepresence Advanced Media Gateway
Vendor
CVE Published:
10 July 2015

Summary

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Cisco TelePresence Advanced Media Gateway devices running specific software versions. This security flaw allows remote attackers to manipulate the actions of authenticated users without their consent, potentially leading to unauthorized access and control over the device. This poses significant risks as attackers can exploit this vulnerability to hijack user sessions and execute malicious commands. It is crucial for users to implement available security patches and enhance their security posture against such threats.

References

http://tools.cisco.com/security/center/viewAlert.x?alertI...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.