CVE-2015-6313

Summary

CVE	CVE-2015-6313
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2016-04-06 23:59:00 UTC
Updated	2016-12-03 03:11:00 UTC
Description	Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted HTTP requests that are not followed by an unspecified negotiation, aka Bug ID CSCuv47565.

Risk And Classification

Problem Types: CWE-399

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Cisco	Telepresence Server 7010	-	All	All	All
Hardware	Cisco	Telepresence Server 7010	-	All	All	All
Hardware	Cisco	Telepresence Server Mse 8710	-	All	All	All
Hardware	Cisco	Telepresence Server Mse 8710	-	All	All	All
Hardware	Cisco	Telepresence Server On Multiparty Media 310	-	All	All	All
Hardware	Cisco	Telepresence Server On Multiparty Media 310	-	All	All	All
Hardware	Cisco	Telepresence Server On Multiparty Media 320	-	All	All	All
Hardware	Cisco	Telepresence Server On Multiparty Media 320	-	All	All	All
Hardware	Cisco	Telepresence Server On Multiparty Media 820	-	All	All	All
Hardware	Cisco	Telepresence Server On Multiparty Media 820	-	All	All	All
Hardware	Cisco	Telepresence Server On Virtual Machine	-	All	All	All
Hardware	Cisco	Telepresence Server On Virtual Machine	-	All	All	All
Application	Cisco	Telepresence Server Software	4.1\(2.29\)	All	All	All
Application	Cisco	Telepresence Server Software	4.1\(2.33\)	All	All	All
Application	Cisco	Telepresence Server Software	4.1\\\(2.29\\\)	All	All	All
Application	Cisco	Telepresence Server Software	4.1\\\(2.33\\\)	All	All	All
Application	Cisco	Telepresence Server Software	4.2\(4.17\)	All	All	All
Application	Cisco	Telepresence Server Software	4.2\\\(4.17\\\)	All	All	All
Application	Cisco	Telepresence Server Software	4.1\\\(2.29\\\)	All	All	All
Application	Cisco	Telepresence Server Software	4.1\\\(2.33\\\)	All	All	All
Application	Cisco	Telepresence Server Software	4.2\\\(4.17\\\)	All	All	All
Operating System	Sun	Opensolaris	snv_124	All	sparc	All
Operating System	Zyxel	Gs1900-10hp Firmware	All	All	All	All
Operating System	Zzinc	Keymouse Firmware	3.08	All	All	All

References

Reference	Source	Link	Tags
Cisco TelePresence Server Crafted URL Handling Denial of Service Vulnerability	CISCO	tools.cisco.com	Vendor Advisory
Cisco TelePresence HTTP Parsing Bug Lets Remote Users Consume Excessive Memory Resources - SecurityTracker	SECTRACK	www.securitytracker.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.