Threat Encyclopedia

Cisco.Energy.Management.Suite.Web.Management.Interface.CSRF

description-logoDescription

This indicates an attack attempt to exploit a Cross-Site Request Forgery Vulnerability in the web-based management interface of Cisco Energy Management Suite Software.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. An attacker may exploit this to cause the server to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application.

affected-products-logoAffected Products

Cisco Energy Management Suite 5.2.2
Cisco Energy Management Suite 5.2
Cisco Energy Management Suite 4.4

Impact

Information Spoofing: Remote attackers can impersonated as themselves as valid users on vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-ems-csrf

CVE References

CVE-2018-15445