« Volver al listado

CVE-2015-0745

Estado: ModificadaMedia (5)—

Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cisco — Headend Digital Broadband Delivery SystemCisco — Headend System Release

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-0745",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-05-30T14:59:03.833",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38944",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1032445",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38944",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032445",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909."
    },
    {
      "lang": "es",
      "value": "Cisco Headend System Release permite a atacantes remotos leer ficheros de secuencias de comandos temporales o ficheros de archivos, y como consecuencia obtener información sensible, a través de una cabecera manipulada en una solicitud HTTP, también conocido como Bug ID CSCus44909."
    }
  ],
  "lastModified": "2026-06-17T00:20:50.177",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:headend_digital_broadband_delivery_system:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B751BEE-0C68-4C9C-A44E-E601A521F03C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "350A824A-9C2F-4F04-9400-61009FD66D43"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD5FFC2E-0590-4920-AC1B-C43D5680FFB3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CCC8CEC-B876-4148-B730-0981F1F33DC1"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "331F2CCD-A95F-483D-88DC-2859A2A42899"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:3.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D68602B8-20D1-424F-9FE2-EF0A0273363C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:i4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52026E53-68A0-4903-8671-9EAF4387024C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}