Unscored severity · published Jun 16, 2015
CVE-2015-2804
The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.6.5.x before 6.6.5.80.R02 generates…
–
CVSS
2%
EPSS
No
On KEV
Description
The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.6.5.x before 6.6.5.80.R02 generates weak session identifiers, which allows remote attackers to hijack arbitrary sessions via a brute force attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Omniswitch Firmware · Alcatel-lucent
through 6.4.5.r02; through 6.4.6.r01; through 6.6.4.r01; through 6.6.5.r02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2804
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2804
Exploit
http://packetstormsecurity.com/files/132235/Alcatel-Lucent-OmniSwitch-Web-Interface-Weak-Session-ID.html
Exploit
http://seclists.org/fulldisclosure/2015/Jun/22
www.securityfocus.com
http://www.securityfocus.com/archive/1/535731/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/75125
Exploit
https://www.redteam-pentesting.de/en/advisories/rt-sa-2015-003/-alcatel-lucent-omniswitch-web-interface-weak-session-id
More from Omniswitch Firmware
–
CVE-2015-2805
Cross-site request forgery (CSRF) vulnerability in sec/content/sec_asa_users_local_db_add.html in the management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E,…