« Volver al listado

CVE-2015-6028

Estado: ModificadaAlta (8.8)—

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Castlerock — Snmpc

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-6028",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Castle Rock Computing SNMPc before 2015-12-17",
          "versions": [
            {
              "status": "affected",
              "version": "Castle Rock Computing SNMPc before 2015-12-17"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-04-10T03:59:00.560",
  "references": [
    {
      "url": "https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems",
      "tags": [
        "Technical Description",
        "Third Party Advisory"
      ],
      "source": "cret@cert.org"
    },
    {
      "url": "https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems",
      "tags": [
        "Technical Description",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter."
    },
    {
      "lang": "es",
      "value": "Castle Rock Computing SNMPc en versiones anteriores a 17-12-2015 tiene una inyección SQL a través del parámetro sc."
    }
  ],
  "lastModified": "2026-06-17T00:30:16.740",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:castlerock:snmpc:9.0:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14F2FFC9-8445-4940-BA1D-11D6E90F710E"
            },
            {
              "criteria": "cpe:2.3:a:castlerock:snmpc:12.1:*:*:*:online:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A57906B-8727-4C61-96EE-6422D66DE124"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cret@cert.org"
}