VULNERABILITY INTELLIGENCE

CVE-2015-7925

CVSS score8 HIGH
EPSS probability1.24%
CISA KEVNot currently listed
Published2015-12-23
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentication of administrators for requests that trigger firmware upload, removal of configuration data, or a reboot.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references