Vulnerability Details CVE-2015-5991
Cross-site request forgery (CSRF) vulnerability in form2WlanSetup.cgi on Philippine Long Distance Telephone (PLDT) SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to hijack the authentication of administrators for requests that perform setup operations, as demonstrated by modifying network settings.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.2%
CVSS Severity
CVSS v2 Score 6.8
Products affected by CVE-2015-5991
-
cpe:2.3:h:philippine_long_distance_telephone:kasda_kw58293:*
-
cpe:2.3:h:philippine_long_distance_telephone:kasda_kw58293_firmware:-
-
cpe:2.3:h:philippine_long_distance_telephone:speedsurf_504an:*
-
Philippine Long Distance Telephone » Speedsurf 504an Firmware » Version: gan9.8u26-4-tx-r6b018-hp.encpe:2.3:o:philippine_long_distance_telephone:speedsurf_504an_firmware:gan9.8u26-4-tx-r6b018-hp.en