CVE-2015-2805

N/A

Published: June 16, 2015 at 04:00 PM UTC

Updated: June 17, 2026 at 12:24 AM UTC

10 products affected across 1 vendorOmniswitch FirmwareOmniswitch 6450Omniswitch 6250

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

Cross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in the management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, 6855, 6900, 10K, and 6860 with firmware 6.4.5.R02, 6.4.6.R01, 6.6.4.R01, 6.6.5.R02, 7.3.2.R01, 7.3.3.R01, 7.3.4.R01, and 8.1.1.R01 allows remote attackers to hijack the authentication of administrators for requests that create users via a crafted request.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Omniswitch Firmware · Alcatel Lucent

95%

v ≤ 6.4.5.r02v ≤ 6.4.6.r01v ≤ 6.6.4.r01v ≤ 6.6.5.r02v ≤ 7.3.2.r01v ≤ 7.3.3.r01v ≤ 7.3.4.r01v ≤ 8.1.1.r01

alcatel-lucent-omniswitch-10k (same device) · alcatel-lucent-omniswitch-6250 (same device) · alcatel-lucent-omniswitch-6400 (same device) · alcatel-lucent-omniswitch-6450 (same device) · alcatel-lucent-omniswitch-6850e (same device) · alcatel-lucent-omniswitch-6855 (same device) · alcatel-lucent-omniswitch-6860 (same device) · alcatel-lucent-omniswitch-6900 (same device) · alcatel-lucent-omniswitch-9000e (same device)

Omniswitch 10K · Alcatel Lucentdevice

80%

All versions

Omniswitch 6250 · Alcatel Lucentdevice

80%

All versions

Omniswitch 6400 · Alcatel Lucentdevice

80%

All versions

Omniswitch 6450 · Alcatel Lucentdevice

80%

All versions