CVE-2013-6976: Cisco EPC3925

Medium severity, CVSS 6.8. EPSS: 3.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in goform/Quick_setup on Cisco EPC3925 devices allows remote attackers to hijack the authentication of administrators for requests that change a password via the Password and PasswordReEnter parameters, aka Bug ID CSCuh37496.

Affected products

• Cisco EPC3925: affected versions not specified

Published 2013-12-19. Last modified 2026-06-17.