CVE-2015-6313

Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted HTTP requests that are not followed by an unspecified negotiation, aka Bug ID CSCuv47565.

CVSS v3 7.5 HIGH
CVSS v2.0 7.8 HIGH

7.5^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-cts1	Vendor Advisory
http://www.securitytracker.com/id/1035501

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:sun:opensolaris:snv_124::sparc:::::
	cpe:2.3:o:zyxel:gs1900-10hp_firmware::::::::
	cpe:2.3:o:zzinc:keymouse_firmware:3.08:::::windows::

OR	cpe:2.3:h:cisco:telepresence_server_7010:-:::::::*
	cpe:2.3:h:cisco:telepresence_server_mse_8710:-:::::::*
	cpe:2.3:h:cisco:telepresence_server_on_multiparty_media_310:-:::::::*
	cpe:2.3:h:cisco:telepresence_server_on_multiparty_media_320:-:::::::*
	cpe:2.3:h:cisco:telepresence_server_on_multiparty_media_820:-:::::::*
	cpe:2.3:h:cisco:telepresence_server_on_virtual_machine:-:::::::*

History

No history.

Information

Published : 2016-04-06 23:59

Updated : 2024-02-04 18:53

NVD link : CVE-2015-6313

Mitre link : CVE-2015-6313

CVE.ORG link : CVE-2015-6313

JSON object : View

Products Affected

cisco

telepresence_server_7010
telepresence_server_on_multiparty_media_320
telepresence_server_on_multiparty_media_820
telepresence_server_on_virtual_machine
telepresence_server_mse_8710
telepresence_server_on_multiparty_media_310

sun

opensolaris

zzinc

keymouse_firmware

zyxel

gs1900-10hp_firmware

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2015-6313", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2016-04-06T23:59:01.283", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-cts1", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1035501", "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted HTTP requests that are not followed by an unspecified negotiation, aka Bug ID CSCuv47565."}, {"lang": "es", "value": "Cisco TelePresence Server 4.1(2.29) hasta la versi\u00f3n 4.2(4.17) sobre dispositivos 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320 y 820; y Virtual Machine (VM) permite a atacantes remotos causar una denegaci\u00f3n de servicio (consumo de memoria o recarga de dispositivo) a trav\u00e9s de peticiones HTTP que no van seguidas de una negociaci\u00f3n no especificada, tambi\u00e9n conocido como Bug ID CSCuv47565."}], "lastModified": "2016-12-03T03:11:42.573", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09B35C0E-6CBA-4B6B-BCD2-F5CC0BF8CF53"}, {"criteria": "cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21D9999F-C55E-4BAB-A401-007FB34B2A5E", "versionEndExcluding": "2.50\\(aazi.0\\)c0"}, {"criteria": "cpe:2.3:o:zzinc:keymouse_firmware:3.08:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "83223AC7-22F3-4FCA-B11B-B769086DCF04"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:telepresence_server_7010:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "983E3CC5-7B3A-467A-A482-0D19792CB55E"}, {"criteria": "cpe:2.3:h:cisco:telepresence_server_mse_8710:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "411829A8-56C6-4851-8063-97F03C7B66B2"}, {"criteria": "cpe:2.3:h:cisco:telepresence_server_on_multiparty_media_310:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "51463F95-8A40-47CC-A0FD-B8F0ED16C39F"}, {"criteria": "cpe:2.3:h:cisco:telepresence_server_on_multiparty_media_320:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7792A73D-C38F-44E6-A660-6CDB0955EC69"}, {"criteria": "cpe:2.3:h:cisco:telepresence_server_on_multiparty_media_820:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "242B17EF-773A-4629-80AC-D3B4E476B56F"}, {"criteria": "cpe:2.3:h:cisco:telepresence_server_on_virtual_machine:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "18C16ABE-9BA2-4852-9B12-70BA6A1D50C2"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}