Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2018-25155

Teradek Slice 7.3.15 Cross-Site Request Forgery via Password Change

Description

Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft a malicious web page that automatically submits password change requests to the device when a logged-in user visits the page.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Teradek, LLC Slice

  • 7.3.15affected

References