CVE-2014-2974: Cross-site request forgery (CSRF) vulnerability in php/user_account.php in Silver Peak VX through 6.2.4 all...

Security readout for executives and security teams

Silver Peak VX through 6.2.4 has a CSRF flaw that could let an attacker abuse a logged-in administrator's browser to create administrative accounts. The source bundle does not provide a CVSS score, patch details, or evidence of active exploitation. Exposure is most likely where Silver Peak VX administrative web interfaces are reachable and administrators use them in authenticated browser sessions. Internet-facing management interfaces increase concern, but the sources do not state deployment prevalence. Treat as a high-priority management-plane issue if Silver Peak VX is present. The business risk is unauthorized administrative access, but urgency should be balanced by exposure and the absence of cited active exploitation. Mitigation focus: Check CERT VU#867980 and vendor guidance for supported remediation.; Identify Silver Peak VX instances running through version 6.2.4.; Restrict administrative interfaces to trusted networks or VPN access..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.