Teradek Cube version 7.3.6 suffers from a password changing cross site request forgery vulnerability.