Authentication Bypass in Cisco EPC3928 Devices
CVE-2015-6401
Currently unrated
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 14 December 2015
What is CVE-2015-6401?
The Cisco EPC3928 series devices running specific versions of the EDVA software allow remote attackers to bypass authentication mechanisms. This vulnerability can potentially enable unauthorized access to sensitive administrative functions, which could lead to security breaches. The affected software versions include 5.5.10, 5.5.11, and 5.7.1, where attackers can leverage crafted HTTP requests to exploit this flaw. Users are advised to implement mitigation strategies outlined by Cisco to protect their network infrastructure.