CVE-2015-6310 Denial of service in n/a
Remote attackers can cause a denial of service in Cisco Unified Communications Manager IM and Presence Service by sending a crafted HTTP request to the REST interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-6310?
CVE-2015-6310 is a medium-severity denial of service vulnerability in n/a, published on 8 Oct 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy service restart) via a crafted HTTP request, aka Bug ID CSCuw31632.
Weakness: CWE-399
Which versions are affected by CVE-2015-6310?
It affects 1 product.
Products include Cisco Unified Communications Manager Im and Presence Service.
How do I fix CVE-2015-6310?
No fix has been published for CVE-2015-6310 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2015-6310 being exploited?
There is no known exploitation of CVE-2015-6310 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2018-0363 Cross-site request forgery in Cisco Unified Communications Manager IM & Presence Service unknown
- CVE-2023-20108 Denial of service in Cisco Unified Communications Manager IM and Presence Service
- CVE-2016-6464 Information disclosure in Cisco Unified Communications Manager
- CVE-2016-1466 Denial of service in n/a
- CVE-2021-1363 Cisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerabilities
Sources
Also known as GHSA-434c-grmw-6675.