CVE-2018-25155 — Teradek Slice 7.3.15 Cross-Site Request Forgery via Password Change
Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers ca…
Published: 2025-12-24 · CVSS: 5.1 · CVSS 4.0
Teradek Slice 7.3.15 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft a malicious web page that automatically submits password change requests to the device when a logged-in user visits the page.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7