cve/2013/CVE-2013-6976.md

CVE-2013-6976

Description

Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password and PasswordReEnter parameters, aka Bug ID CSCuh37496.

POC

Reference

• http://packetstormsecurity.com/files/124449/Cisco-EPC3925-Cross-Site-Request-Forgery.html
• http://packetstormsecurity.com/files/124449/Cisco-EPC3925-Cross-Site-Request-Forgery.html
• http://www.exploit-db.com/exploits/30362/
• http://www.exploit-db.com/exploits/30362/

Github

No PoCs found on GitHub currently.