CVE-2015-0725

EPSS 1.94%
Veröffentlicht 16.07.2015 21:59:00
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Cisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming (aka VDS-IS or CDS-IS) before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug IDs CSCus79834 and CSCuu63409.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 30 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Videoscape Distribution Suite Service Broker Version 1.0.1

Cisco ≫ Videoscape Distribution Suite Service Broker Version 1.0_base

Cisco ≫ Videoscape Distribution Suite Service Broker Version 1.1_base

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 1.0.0

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.0.0

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.1.2

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.1.2_b17

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.1.2_b26

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.1.2_b34

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.1.2_b54

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.1.2_b60

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.2.0

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.2.0_b26

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.2.1

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.2.1_b9

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.2.1_b15

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.2.1_b20

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.3.0

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.3.0 Update r1

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.3.1

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.3.1 Update r1

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.3.1 Update r2

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.3.1 Update r3

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.3.1 Update r4

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.3.1 Update r5

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 3.3.1 Update r6

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 4.0.0

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 4.0.0 Update r1

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 4.0.0 Update r2

Cisco ≫ Videoscape Distribution Suite For Internet Streaming Version 4.0.0 Update r3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.94%	0.775

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150715-vds

Patch

Vendor Advisory

http://www.securitytracker.com/id/1032936

https://nvd.nist.gov/vuln/detail/CVE-2015-0725

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0725

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0725

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-0725