12 Déc 2015

CVE-2015-6410

Publié par . Publié dans Bypass something

Vulnerability Details :

The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.
Publish Date : 2015-12-13 Last Update Date : 2015-12-14

- CVSS Scores & Vulnerability Types

CVSS Score	4.0
Confidentiality Impact	Partial(There is considerable informational disclosure.)
Integrity Impact	None(There is no impact to the integrity of the system)
Availability Impact	None(There is no impact to the availability of the system.)
Access Complexity	Low(Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication	Single system(The vulnerability requires an attacker to be logged into the system (such as at a command line or via a desktop session or web interface).)
Gained Access	None
Vulnerability Type(s)	Bypass a restriction or similar
CWE ID	20

- Products Affected By CVE-2015-6410

#	Product Type	Vendor	Product	Version	Update	Edition	Language
1	Application	Cisco	Telepresence Video Communication Server Software	X8.5	RC4			Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Cisco	Telepresence Video Communication Server Software	1

- References For CVE-2015-6410

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-ucm
CISCO 20151209 Cisco Unified Communications Manager Mobile and Remote Access Services Identity Attack Vulnerability

- Metasploit Modules Related To CVE-2015-6410

There are not any metasploit modules related to this vulnerability (Please visit www.metasploit.com for more information)

CVE-2015-6410

Vulnerability Details :

- CVSS Scores & Vulnerability Types

- Products Affected By CVE-2015-6410

- Number Of Affected Versions By Product

- References For CVE-2015-6410

- Metasploit Modules Related To CVE-2015-6410

Notre expertise cybersécurité validée par de multiples certifications informatiques

Newsletter Cybersécurité

Ressources Sécurité

Pour nous Contacter