CVE-2015-2804: Infoleak
First published: Tue Jun 16 2015(Updated: )
The management web interface in Alcatel-Lucent OmniSwitch 6450, 6250, 6850E, 9000E, 6400, and 6855 with firmware before 6.6.4.309.R01 and 6.6.5.x before 6.6.5.80.R02 generates weak session identifiers, which allows remote attackers to hijack arbitrary sessions via a brute force attack.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Alcatel-Lucent OmniSwitch Firmware | <=6.4.5.r02 | |
| Alcatel-Lucent OmniSwitch Firmware | <=6.4.6.r01 | |
| Alcatel-Lucent OmniSwitch Firmware | <=6.6.4.r01 | |
| Alcatel-Lucent OmniSwitch Firmware | <=6.6.5.r02 | |
| Alcatel-lucent Omniswitch 6250 | ||
| Alcatel-Lucent OmniSwitch 6400 | ||
| Alcatel-Lucent OmniSwitch 6450 | ||
| Alcatel-lucent Omniswitch 6850e | ||
| Alcatel-lucent Omniswitch 6855 | ||
| Alcatel-lucent Omniswitch 9000e |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/132235/Alcatel-Lucent-OmniSwitch-Web-Interface-Weak-Session-ID.html
- http://seclists.org/fulldisclosure/2015/Jun/22
- http://www.securityfocus.com/archive/1/535731/100/0/threaded
- http://www.securityfocus.com/bid/75125
- https://www.redteam-pentesting.de/en/advisories/rt-sa-2015-003/-alcatel-lucent-omniswitch-web-interface-weak-session-id
Frequently Asked Questions
What is the severity of CVE-2015-2804?
CVE-2015-2804 is classified as a high severity vulnerability due to the risk of session hijacking.
How do I fix CVE-2015-2804?
To fix CVE-2015-2804, update the Alcatel-Lucent OmniSwitch firmware to versions 6.6.4.309.R01 or 6.6.5.80.R02 or later.
What devices are affected by CVE-2015-2804?
CVE-2015-2804 affects Alcatel-Lucent OmniSwitch models 6450, 6250, 6850E, 9000E, 6400, and 6855 with vulnerable firmware versions.
What type of attack can exploit CVE-2015-2804?
CVE-2015-2804 can be exploited through a brute force attack to hijack session identifiers.
Is CVE-2015-2804 a remote vulnerability?
Yes, CVE-2015-2804 allows remote attackers to exploit the vulnerability without physical access to the device.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/alcatel-lucent
- canonical/alcatel-lucent omniswitch firmware
- version/alcatel-lucent omniswitch firmware/6.4.5.r02
- version/alcatel-lucent omniswitch firmware/6.4.6.r01
- version/alcatel-lucent omniswitch firmware/6.6.4.r01
- version/alcatel-lucent omniswitch firmware/6.6.5.r02
- canonical/alcatel-lucent omniswitch 6250
- canonical/alcatel-lucent omniswitch 6400
- canonical/alcatel-lucent omniswitch 6450
- canonical/alcatel-lucent omniswitch 6850e
- canonical/alcatel-lucent omniswitch 6855
- canonical/alcatel-lucent omniswitch 9000e