$ cve CVE-2015-2878 JSON

CVE-2015-2878 EXPLOIT

8.8

HIGH · CVSS 3.0 · EPSS 4.2% (pctl 91)

Patch early

A public exploit exists.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication of administrators for requests that (1) add arbitrary accounts via the name parameter to interface/rest/accounts/json; turn off the (2) Url matching, (3) DNS Inject, or (4) IP Redirect Sensor in a request to interface/rest/dpi/setEnabled/1; or (5) perform whitelisting of malware MD5 hash IDs via the id parameter to interface/rest/md5-threats/whitelist.

Scoring

CVSS	8.8 (HIGH, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	4.18% — more likely to be exploited than 91% of all CVEs
Weakness	CWE-352
On CISA KEV	no
Public exploit	yes
Published	2017-10-23
Last modified	2026-06-17

Affected (1)

Vendor	Product
watchguard	hawkeye g

Public exploits

Source	Title	Date
exploit-db	Hawkeye-G 3.0.1.4912 - Cross-Site Request Forgery	2015-07-24

References

→ the Explorer · watch your stack · NVD