CVE-2015-6332 — Cisco Prime Infrastructure vulnerability

CWE-3997 documents6 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 36.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Prime Infrastructure
Timeline
PublishedOct 13
Latest updateMay 17

Description

Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service (daemon hang) by sending many SSL renegotiation requests, aka Bug ID CSCuv56830.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-5j25-h4rj-rvr9: Cisco Prime Infrastructure 2↗2022-05-17
▶
CVEList
CVE-2015-6332: Cisco Prime Infrastructure 2↗2015-10-13
▶

💥Exploits & PoCs

1
Exploit-DB
Acunetix 9.5 - OLE Automation Array Remote Code Execution↗2015-03-27
▶

📋Vendor Advisories

1
Cisco
Cisco Prime Renegotiation Request Denial of Service Vulnerability↗2015-10-09
▶

🕵️Threat Intelligence

1
Unit42
Attack on French Diplomat Linked to Operation Lotus Blossom↗2015-12-18
▶
CVE-2015-6332 — Cisco vulnerability | cvebase