High severity · published Apr 6, 2016
CVE-2015-6312
Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) devices allows remote attackers to cause a…
7.5
CVSS
1.9%
EPSS
No
On KEV
Description
Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310 and 320, and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (device reload) via malformed STUN packets, aka Bug ID CSCuv01348.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EP
Emc Powerscale Onefs · Dell
8.2.2 · source: NVD
GF
Gs1900-10hp Firmware · Zyxel
before 2.50\(aazi.0\)c0 · source: NVD
JF
Jr6150 Firmware · Netgear
before 2017-01-06 · source: NVD
KF
Keymouse Firmware · Zzinc
3.08 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6312
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6312
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-cts2
www.securitytracker.com
http://www.securitytracker.com/id/1035500
More from Emc Powerscale Onefs
9.8
CVE-2022-45100
Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Validation vulnerability
9.8
CVE-2022-45101
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS
9.8
CVE-2022-34371
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerability
9.8
CVE-2022-22561
Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts
9.8
CVE-2022-26854
Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms