CVE-2015-6343
published 2015-10-31CVE-2015-6343: The SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service via crafted…
PriorityP425medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.97%
78.0th percentile
The SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service via crafted SIP messages, aka Bug ID CSCuv79202.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | unified_border_element | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_cisco5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Unified Border Element Denial of Service Vulnerability
vendor_cisco·2015-10-26·CVSS 5.0
CVE-2015-6343 [MEDIUM] CWE-399 Cisco Unified Border Element Denial of Service Vulnerability
Cisco Unified Border Element Denial of Service Vulnerability
A vulnerability in the Session Initiation Protocol (SIP) functionality of Cisco Unified Border Element (CUBE) could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition.
The vulnerability is due to incorrect processing of SIP messages. An attacker could exploit this vulnerability by sending unsupported SIP messages to a CUBE.
Cisco has released software updates that address this vulnerability.
Workarounds that mitigate this vulnerability are not available.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151026-cube
Cisco
Cisco Unified Border Element Denial of Service Vulnerability
vendor_cisco
CVE-2015-6343 Cisco Unified Border Element Denial of Service Vulnerability
CVE-2015-6343: Cisco Unified Border Element Denial of Service Vulnerability
A vulnerability in the Session Initiation Protocol (SIP) functionality of Cisco Unified Border Element (CUBE) could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. The vulnerability is due to incorrect processing of SIP messages. An attacker could exploit this vulnerability by sending unsupported SIP messages to a CUBE. Cisco has released software updates that address this vulnerability.
CWE: CWE-399, CWE-399
Bug IDs: CSCuv79202
GHSA
GHSA-p4f9-2q69-hf9h: The SIP implementation in Cisco IOS 15
ghsa_unreviewed·2022-05-17
CVE-2015-6343 [MEDIUM] GHSA-p4f9-2q69-hf9h: The SIP implementation in Cisco IOS 15
The SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service via crafted SIP messages, aka Bug ID CSCuv79202.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-10-31
Published