CVE-2015-6399

2015-12-1505:59:03

CWE-399

[email protected]

web.nvd.nist.gov

cisco

imc

supervisor

denial of service

vulnerability

cve-2015-6399

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.5%

JSON

The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) allows remote authenticated users to cause a denial of service (IP interface outage) via crafted parameters in an HTTP request, aka Bug ID CSCuv38286.

Affected configurations

NVD

Node

ciscointegrated_management_controller_supervisorMatch1.0.0.0

ciscointegrated_management_controller_supervisorMatch1.0.0.1

CPENameOperatorVersion
cisco:integrated_management_controller_supervisorcisco integrated management controller supervisoreq1.0.0.0
cisco:integrated_management_controller_supervisorcisco integrated management controller supervisoreq1.0.0.1

CPE	Name	Operator	Version
cisco:integrated_management_controller_supervisor	cisco integrated management controller supervisor	eq	1.0.0.0
cisco:integrated_management_controller_supervisor	cisco integrated management controller supervisor	eq	1.0.0.1