Authentication Bypass in Cisco EPC3928 Devices

CVE-2015-6401

Summary

The Cisco EPC3928 series devices running specific versions of the EDVA software allow remote attackers to bypass authentication mechanisms. This vulnerability can potentially enable unauthorized access to sensitive administrative functions, which could lead to security breaches. The affected software versions include 5.5.10, 5.5.11, and 5.7.1, where attackers can leverage crafted HTTP requests to exploit this flaw. Users are advised to implement mitigation strategies outlined by Cisco to protect their network infrastructure.

References