CVE-2015-2804

N/A

Published: June 16, 2015 at 04:00 PM UTC

Updated: June 17, 2026 at 12:24 AM UTC

7 products affected across 1 vendorOmniswitch FirmwareOmniswitch 6400Omniswitch 6450

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 2%

Description

The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.6.5.x before 6.6.5.80.R02 generates weak session identifiers, which allows remote attackers to hijack arbitrary sessions via a brute force attack.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Omniswitch Firmware · Alcatel Lucent

95%

v ≤ 6.4.5.r02v ≤ 6.4.6.r01v ≤ 6.6.4.r01v ≤ 6.6.5.r02

alcatel-lucent-omniswitch-6250 (same device) · alcatel-lucent-omniswitch-6400 (same device) · alcatel-lucent-omniswitch-6450 (same device) · alcatel-lucent-omniswitch-6850e (same device) · alcatel-lucent-omniswitch-6855 (same device) · alcatel-lucent-omniswitch-9000e (same device)

Omniswitch 6250 · Alcatel Lucentdevice

80%

All versions

Omniswitch 6400 · Alcatel Lucentdevice

80%

All versions

Omniswitch 6450 · Alcatel Lucentdevice

80%

All versions

Omniswitch 6850E · Alcatel Lucentdevice

80%

All versions