CVE-2017-6634

A vulnerability in the Device Manager web interface of Cisco Industrial Ethernet 1000 Series Switches 1.3 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of an affected system. The vulnerability is due to insufficient CSRF protection by the Device Manager web interface. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link or visit an attacker-controlled website. A successful exploit could allow the attacker to submit arbitrary requests to an affected device via the Device Manager web interface and with the privileges of the user. Cisco Bug IDs: CSCvc88811.

• CWE-352
• CWE-352

• http://www.securityfocus.com/bid/98524Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038517
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ie1000csrfVendor Advisory
• http://www.securityfocus.com/bid/98524Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038517
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-ie1000csrfVendor Advisory

Published

May 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6628A vulnerability in SMART-SSL Accelerator functionality for C…
• CVE-2017-6629A vulnerability in the ImageID parameter of Cisco Unity Conn…
• CVE-2017-6630A vulnerability in the Session Initiation Protocol (SIP) imp…
• CVE-2017-6631A vulnerability in the HTTP remote procedure call (RPC) serv…
• CVE-2017-6632A vulnerability in the logging configuration of Secure Socke…7.5
• CVE-2017-6633A vulnerability in the TCP throttling process of Cisco UCS C…
• CVE-2017-6635A vulnerability in the web interface of Cisco Prime Collabor…
• CVE-2017-6636A vulnerability in the web interface of Cisco Prime Collabor…
• CVE-2017-6637A vulnerability in the web interface of Cisco Prime Collabor…
• CVE-2017-6638A vulnerability in how DLL files are loaded with Cisco AnyCo…
• CVE-2017-6639A vulnerability in the role-based access control (RBAC) func…
• CVE-2017-6640A vulnerability in Cisco Prime Data Center Network Manager (…