CVE-2015-6288
published 2015-09-14CVE-2015-6288: Cisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a denial of service…
PriorityP425medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
2.21%
80.7th percentile
Cisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a denial of service (rapid log-file rollover and application fault) via crafted HTTP requests, aka Bug ID CSCuw09620.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | content_security_management_appliance | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_cisco5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Security Management Appliance Log Rollover Denial of Service Vulnerability
vendor_cisco·2015-09-08·CVSS 5.0
CVE-2015-6288 [MEDIUM] CWE-399 Cisco Security Management Appliance Log Rollover Denial of Service Vulnerability
Cisco Security Management Appliance Log Rollover Denial of Service Vulnerability
A vulnerability in the web interface of the Cisco Security Management Appliance (SMA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted device.
The vulnerability is due to inadequate validation of user credentials for incoming HTTP requests, which can cause the device to manipulate an internal log file. An attacker could exploit this vulnerability by sending crafted HTTP requests to the device. A successful exploit could allow the attacker to cause a DoS condition due to an application fault. The application fault is caused when the log file wraps quickly.
Cisco has confirmed the vulnerability; however, software updates are not available.
To exploit
GHSA
GHSA-2948-rrxj-6qwq: Cisco Content Security Management Appliance (SMA) 7
ghsa_unreviewed·2022-05-17
CVE-2015-6288 [MEDIUM] GHSA-2948-rrxj-6qwq: Cisco Content Security Management Appliance (SMA) 7
Cisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a denial of service (rapid log-file rollover and application fault) via crafted HTTP requests, aka Bug ID CSCuw09620.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-09-14
Published