CVE-2015-6415 - Cisco Unified Computing System (UCS) 2.2(3f)A on Fabric Interconnect 6200 devices allows remote atta

CVE-2015-6415

Summary

Cisco Unified Computing System (UCS) 2.2(3f)A on Fabric Interconnect 6200 devices allows remote attackers to cause a denial of service (CPU consumption or device outage) via a SYN flood on the SSH port during the booting process, aka Bug ID CSCuu81757.

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-ucs
http://www.securityfocus.com/bid/85711
http://www.securitytracker.com/id/1034381

Vulnerable Configurations

cpe:2.3:o:cisco:unified_computing_system:2.2\(3f\)a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:unified_computing_system:2.2\(3f\)a:*:*:*:*:*:*:*

CVSS

Base:	7.1 (as of 15-04-2019 - 12:30)
Impact:
Exploitability:

CWE

CWE-399

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:N/A:C

refmap via4

bid	85711
cisco	20151210 Cisco Unified Computing System 6200 Series Fabric Interconnect Series Switch DoS Vulnerability
sectrack	1034381

Last major update

15-04-2019 - 12:30

Published

12-12-2015 - 16:59

Last modified

15-04-2019 - 12:30