« Volver al listado

CVE-2015-0747

Estado: ModificadaMedia (4.3)—

Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Cisco — Headend Digital Broadband Delivery SystemCisco — Headend System ReleaseCisco — Videoscape Conductor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-0747",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-05-30T14:59:04.817",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38945",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1032447",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38945",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032447",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408."
    },
    {
      "lang": "es",
      "value": "Cisco Conductor for Videoscape 3.0 y Cisco Headend System Release permiten a atacantes remotos inyectar cookies arbitrarias a través de una solicitud HTTP manipulada, también conocido como Bug ID CSCuh25408."
    }
  ],
  "lastModified": "2026-06-17T00:20:50.380",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:videoscape_conductor:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B3448EC-8F1E-4306-AADF-770DD39C24C3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_digital_broadband_delivery_system:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B751BEE-0C68-4C9C-A44E-E601A521F03C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "350A824A-9C2F-4F04-9400-61009FD66D43"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD5FFC2E-0590-4920-AC1B-C43D5680FFB3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CCC8CEC-B876-4148-B730-0981F1F33DC1"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "331F2CCD-A95F-483D-88DC-2859A2A42899"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:3.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D68602B8-20D1-424F-9FE2-EF0A0273363C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:headend_system_release:i4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52026E53-68A0-4903-8671-9EAF4387024C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}