Vulnslist

find the latest Cisco vulnerabilities

Cisco Videoscape Delivery System Denial of Service Vulnerability

cisco-sa-20150715-vds · High · Published · Updated

A vulnerability in the HTTP processing module of the Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) and Cisco Videoscape Distribution Suite Service Broker (VDS-SB) could allow an unauthenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to a vulnerable device. An exploit could allow the attacker to cause a denial of service (DoS) condition. There is no workaround that mitigates this vulnerability. Cisco has released software updates that address this vulnerability for Cisco VDS-IS. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150715-vds

Cisco advisory ·CSAF JSON

Workarounds

There are no known workarounds for this vulnerability.

CVEsCVE-2015-0725
Cisco Bug IDsCSCus79834, CSCuu63409
CVSS ScoreBase 7.8
Base 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C/E:F/RL:OF/RC:C
Base 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C/E:F/RL:U/RC:C
Product Names From Source
Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS), Cisco Videoscape Distribution Suite Service Broker

Related Products

Product CVE Evidence
Cisco RV Series Routers CVE-2015-0725 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2015-0725 Cisco OpenVuln
Cisco MDS 9000 Family of Multilayer Switches CVE-2015-0725 Cisco OpenVuln
Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) CVE-2015-0725 Cisco OpenVuln
Cisco Videoscape Distribution Suite Service Broker CVE-2015-0725 Cisco OpenVuln