Lucene search

[email protected]CVE-2015-6312

HistoryApr 06, 2016 - 11:59 p.m.

CVE-2015-6312

2016-04-0623:59:00

CWE-119

[email protected]

web.nvd.nist.gov

cisco

telepresence

cve-2015-6312

denial of service

vulnerability

cisco telepresence server

stun packets

nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON

Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (device reload) via malformed STUN packets, aka Bug ID CSCuv01348.

Affected configurations

NVD

Node

dellemc_powerscale_onefsMatch8.2.2

netgearjr6150_firmwareRange<2017-01-06

zyxelgs1900-10hp_firmwareRange<2.50\(aazi.0\)c0

zzinckeymouse_firmwareMatch3.08windows

AND

ciscotelepresence_server_7010Match-

ciscotelepresence_server_mse_8710Match-

ciscotelepresence_server_on_multiparty_media_310Match-

ciscotelepresence_server_on_multiparty_media_320Match-

ciscotelepresence_server_on_virtual_machineMatch-

CPENameOperatorVersion
dell:emc_powerscale_onefsdell emc powerscale onefseq8.2.2
netgear:jr6150_firmwarenetgear jr6150 firmwarelt2017-01-06
zyxel:gs1900-10hp_firmwarezyxel gs1900-10hp firmwarelt2.50\(aazi.0\)c0
zzinc:keymouse_firmwarezzinc keymouse firmwareeq3.08

CPE	Name	Operator	Version
dell:emc_powerscale_onefs	dell emc powerscale onefs	eq	8.2.2
netgear:jr6150_firmware	netgear jr6150 firmware	lt	2017-01-06
zyxel:gs1900-10hp_firmware	zyxel gs1900-10hp firmware	lt	2.50\(aazi.0\)c0
zzinc:keymouse_firmware	zzinc keymouse firmware	eq	3.08

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-cts2

www.securitytracker.com/id/1035500

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON

Related for CVE-2015-6312

nvd1 prion1 openvas1 cisco1 nessus1 cvelist1