« Volver al listado

CVE-2015-0744

Estado: ModificadaAlta (7.8)—

Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and CSCus68315.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-0744",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-05-30T14:59:02.723",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38943",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/74916",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1032445",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38943",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/74916",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032445",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and CSCus68315."
    },
    {
      "lang": "es",
      "value": "Cisco DTA Control System (DTACS) 4.0.0.9 y Cisco Headend System Release permiten a atacantes remotos provocar una denegación de servicio (consumo de CPU y memoria e interrupción de servicio TCP) a través de (1) una inundación SYN o (2) otro tipo de inundación de tráfico TCP, también conocidos como Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657 y CSCus68315."
    }
  ],
  "lastModified": "2026-06-17T00:20:50.080",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:dta_control_system:4.0.0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2955F766-BF44-4F78-B9CD-489A49CB62D8"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_digital_broadband_delivery_system:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B751BEE-0C68-4C9C-A44E-E601A521F03C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "350A824A-9C2F-4F04-9400-61009FD66D43"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD5FFC2E-0590-4920-AC1B-C43D5680FFB3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CCC8CEC-B876-4148-B730-0981F1F33DC1"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "331F2CCD-A95F-483D-88DC-2859A2A42899"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:3.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D68602B8-20D1-424F-9FE2-EF0A0273363C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:i4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52026E53-68A0-4903-8671-9EAF4387024C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}