« Volver al listado

CVE-2006-6489

Estado: ModificadaMedia (5)—

The SISCO OSI stack, as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP, and possibly other control system applications, allows remote attackers to cause a denial of service (application termination and restart) via malformed packets.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

Sisco — Ax-s4 IccpSisco — Ax-s4 MMSSisco — Iccp ToolkitSisco — ISO StackSisco — Mms-ease

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-6489",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-01-18T02:28:00.000",
  "references": [
    {
      "url": "http://osvdb.org/32924",
      "source": "cret@cert.org"
    },
    {
      "url": "http://secunia.com/advisories/23819",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/145825",
      "tags": [
        "US Government Resource"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/MIMG-6TUHTT",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/22095",
      "source": "cret@cert.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0237",
      "source": "cret@cert.org"
    },
    {
      "url": "http://osvdb.org/32924",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/23819",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/145825",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/MIMG-6TUHTT",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/22095",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0237",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The SISCO OSI stack, as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP, and possibly other control system applications, allows remote attackers to cause a denial of service (application termination and restart) via malformed packets."
    },
    {
      "lang": "es",
      "value": "La pila del SISCO OSI, como la usada en el SISCO MMS-EASE, ICCP Toolkit para MMS-EASE, AX-S4 MMS y AX-S4 ICCP y posiblemente otras aplicaciones de sistemas de control, permite a atacantes remotos provocar una denegación de servicio (terminación de la aplicación y reseteo) a través de paquetes mal formados."
    }
  ],
  "lastModified": "2026-06-16T22:33:13.617",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sisco:ax-s4_iccp:3.0103:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F6D8D02-23C8-4179-A51E-49C1DEBB9887"
            },
            {
              "criteria": "cpe:2.3:a:sisco:ax-s4_iccp:3.0155:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "70E95C78-669C-4C4E-A371-EB8A2E5AAEE0"
            },
            {
              "criteria": "cpe:2.3:a:sisco:ax-s4_mms:5.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9235F452-D257-4ED0-AF69-8822AB5BC1D5"
            },
            {
              "criteria": "cpe:2.3:a:sisco:ax-s4_mms:5.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99E1AC40-D010-4CFC-AAF6-B34AF1D424CA"
            },
            {
              "criteria": "cpe:2.3:a:sisco:iccp_toolkit:4.10_for_mms-ease:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BEDEA8B8-6F93-4147-A895-2B7ED1405173"
            },
            {
              "criteria": "cpe:2.3:a:sisco:iccp_toolkit:5.03_for_mms-ease:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B935268E-F399-43F5-9C4D-A734AEF536E2"
            },
            {
              "criteria": "cpe:2.3:a:sisco:iso_stack:3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DC2DA49-D5C7-4F4E-AB60-96E3BDB74124"
            },
            {
              "criteria": "cpe:2.3:a:sisco:mms-ease:7.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6D087740-2C93-41A6-A889-9CAAF8A2F6A0"
            },
            {
              "criteria": "cpe:2.3:a:sisco:mms-ease:8.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E34A9FE8-5553-4F76-BD1F-D5588701A56D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}