U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2015-2805

Change History

Modified Analysis by NIST 6/17/2015 2:09:23 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
Configuration 1
     AND
          OR
               *cpe:2.3:o:alcatel-lucent:omniswitch_firmware:6.4.5.r02:*:*:*:*:*:*:* (and previous)
               *cpe:2.3:o:alcatel-lucent:omniswitch_firmware:6.4.6.r01:*:*:*:*:*:*:* (and previous)
               *cpe:2.3:o:alcatel-lucent:omniswitch_firmware:6.6.4.r01:*:*:*:*:*:*:* (and previous)
               *cpe:2.3:o:alcatel-lucent:omniswitch_firmware:6.6.5.r02:*:*:*:*:*:*:* (and previous)
               *cpe:2.3:o:alcatel-lucent:omniswitch_firmware:7.3.2.r01:*:*:*:*:*:*:* (and previous)
               *cpe:2.3:o:alcatel-lucent:omniswitch_firmware:7.3.3.r01:*:*:*:*:*:*:* (and previous)
               *cpe:2.3:o:alcatel-lucent:omniswitch_firmware:7.3.4.r01:*:*:*:*:*:*:* (and previous)
               *cpe:2.3:o:alcatel-lucent:omniswitch_firmware:8.1.1.r01:*:*:*:*:*:*:* (and previous)
          OR
               cpe:2.3:h:alcatel-lucent:omniswitch_6450:*:*:*:*:*:*:*:*
               cpe:2.3:h:alcatel-lucent:omniswitch_6855:*:*:*:*:*:*:*:*
               cpe:2.3:h:alcatel-lucent:omniswitch_6400:*:*:*:*:*:*:*:*
               cpe:2.3:h:alcatel-lucent:omniswitch_9000e:*:*:*:*:*:*:*:*
               cpe:2.3:h:alcatel-lucent:omniswitch_6900:*:*:*:*:*:*:*:*
               cpe:2.3:h:alcatel-lucent:omniswitch_6850e:*:*:*:*:*:*:*:*
               cpe:2.3:h:alcatel-lucent:omniswitch_6250:*:*:*:*:*:*:*:*
               cpe:2.3:h:alcatel-lucent:omniswitch_10k:*:*:*:*:*:*:*:*
               cpe:2.3:h:alcatel-lucent:omniswitch_6860:*:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Added CWE

								
							
							
						
CWE-352
Changed Reference Type
http://packetstormsecurity.com/files/132236/Alcatel-Lucent-OmniSwitch-Web-Interface-Cross-Site-Request-Forgery.html No Types Assigned
http://packetstormsecurity.com/files/132236/Alcatel-Lucent-OmniSwitch-Web-Interface-Cross-Site-Request-Forgery.html Exploit
Changed Reference Type
http://seclists.org/fulldisclosure/2015/Jun/23 No Types Assigned
http://seclists.org/fulldisclosure/2015/Jun/23 Exploit
Changed Reference Type
http://www.securityfocus.com/archive/1/archive/1/535732/100/0/threaded No Types Assigned
http://www.securityfocus.com/archive/1/archive/1/535732/100/0/threaded Exploit
Changed Reference Type
https://www.exploit-db.com/exploits/37261/ No Types Assigned
https://www.exploit-db.com/exploits/37261/ Exploit
Changed Reference Type
https://www.redteam-pentesting.de/advisories/rt-sa-2015-004 No Types Assigned
https://www.redteam-pentesting.de/advisories/rt-sa-2015-004 Exploit