What’s Vulnerable › Vulnerabilities

CVE-2015-6401

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-12-14 · updated 2026-06-17
• Weakness: CWE-287

Description

Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execute unspecified administrative functions via a crafted HTTP request, aka Bug ID CSCux24941.

Affected products

• Cisco Epc3928 Docsis 3.0 8X4 Wireless Residential Gateway With Embedded Digital Voice Adapter: 5.5.10, 5.5.11, 5.7.1

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-cwr
• http://www.securitytracker.com/id/1034347
• https://www.exploit-db.com/exploits/39904/
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151208-cwr
• http://www.securitytracker.com/id/1034347
• https://www.exploit-db.com/exploits/39904/

Get alerted when CVE-2015-6401 or the next vulnerability affects your stack