Approved changes feed: RSS · Atom

cpe:2.3:a:watchguard:hawkeye_g:3.0.1.4912:*:*:*:*:*:*:*

part: a version: 3.0.1.4912 update: *

VendorWatchguard (ec468727-86da-5bb0-9483-b62749e25478)
ProductHawkeye G (e774d9eb-4ea8-5a84-8237-833c9c37be29)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2878 vulnerable 2026-06-08 05:06:36.103885 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication of administrators for requests that (1) add arbitrary accounts via the name parameter to interface/rest/accounts/json; turn off the (2) Url matching, (3) DNS Inject, or (4) IP Redirect Sensor in a request to interface/rest/dpi/setEnabled/1; or (5) perform whitelisting of malware MD5 hash IDs via the id parameter to interface/rest/md5-threats/whitelist.
Published: 2017-10-23T18:00:00.000Z
Updated: 2024-08-06T05:32:20.196Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.