CVE-2015-6313 — Zyxel Gs1900-10hp Firmware vulnerability

CWE-3994 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.3%
top 44.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Zyxel Gs1900-10hp FirmwareSUN OpensolarisZzinc Keymouse Firmware
Timeline
PublishedApr 6
Latest updateMay 17

Description

Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted HTTP requests that are not followed by an unspecified negotiation, aka Bug ID CSCuv47565.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶NVDzyxel/gs1900-10hp_firmware< 2.50\(aazi.0\)c0
▶NVDsun/opensolarissnv_124

🔴Vulnerability Details

2
GHSA
GHSA-5wgx-xp3w-gx33: Cisco TelePresence Server 4↗2022-05-17
▶
CVEList
CVE-2015-6313: Cisco TelePresence Server 4↗2016-04-06
▶

📋Vendor Advisories

1
Cisco
Cisco TelePresence Server Crafted URL Handling Denial of Service Vulnerability↗2016-04-06
▶
CVE-2015-6313 — Zyxel vulnerability | cvebase