Unscored severity · published Dec 15, 2015
CVE-2015-6399
The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) allows remote authenticated users to cause a denial of service (IP interface…
–
CVSS
2.2%
EPSS
No
On KEV
Description
The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) allows remote authenticated users to cause a denial of service (IP interface outage) via crafted parameters in an HTTP request, aka Bug ID CSCuv38286.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Integrated Management Controller Supervisor · Cisco
1.0.0.0; 1.0.0.1 · source: NVD
Affected product
IM
Integrated Management Controller Supervisor
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6399
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6399
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-imc
www.securityfocus.com
http://www.securityfocus.com/bid/108851
www.securityfocus.com
http://www.securityfocus.com/bid/79031
www.securitytracker.com
http://www.securitytracker.com/id/1038475
More from Integrated Management Controller Supervisor
9.8
CVE-2019-1974
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data…
9.8
CVE-2019-1937
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data…
9.8
CVE-2019-1935
A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote…
8.8
CVE-2019-1907
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to set sensitive configuration values and gain…
8.8
CVE-2019-1865
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an authenticated, remote attacker to inject arbitrary…