CVE-2015-0747

2015-05-3014:59:04

CWE-20

[email protected]

web.nvd.nist.gov

cisco

conductor

videoscape

3.0

remote attackers

arbitrary cookies

http request

cve-2015-0747

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.5%

JSON

Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.

Affected configurations

NVD

Node

ciscovideoscape_conductorMatch3.0

ciscoheadend_digital_broadband_delivery_systemMatch-

ciscoheadend_system_releaseMatch2.5

ciscoheadend_system_releaseMatch2.7

ciscoheadend_system_releaseMatch3.2

ciscoheadend_system_releaseMatch3.5

ciscoheadend_system_releaseMatch3.7

ciscoheadend_system_releaseMatchi4.3

CPENameOperatorVersion
cisco:videoscape_conductorcisco videoscape conductoreq3.0
cisco:headend_digital_broadband_delivery_systemcisco headend digital broadband delivery systemeq-
cisco:headend_system_releasecisco headend system releaseeq2.5
cisco:headend_system_releasecisco headend system releaseeq2.7
cisco:headend_system_releasecisco headend system releaseeq3.2
cisco:headend_system_releasecisco headend system releaseeq3.5
cisco:headend_system_releasecisco headend system releaseeq3.7
cisco:headend_system_releasecisco headend system releaseeqi4.3

CPE	Name	Operator	Version
cisco:videoscape_conductor	cisco videoscape conductor	eq	3.0
cisco:headend_digital_broadband_delivery_system	cisco headend digital broadband delivery system	eq	-
cisco:headend_system_release	cisco headend system release	eq	2.5
cisco:headend_system_release	cisco headend system release	eq	2.7
cisco:headend_system_release	cisco headend system release	eq	3.2
cisco:headend_system_release	cisco headend system release	eq	3.5
cisco:headend_system_release	cisco headend system release	eq	3.7
cisco:headend_system_release	cisco headend system release	eq	i4.3