CVE-2015-6284: Buffer Overflow
Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.1(2.33) on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service (device crash) via a crafted URL, aka Bug ID CSCuu28277.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6284?
CVE-2015-6284 has been classified as having a high severity due to its potential to cause a denial of service.
How do I fix CVE-2015-6284?
To mitigate CVE-2015-6284, upgrade to the latest Cisco TelePresence Server software version that addresses this vulnerability.
What causes the CVE-2015-6284 vulnerability?
CVE-2015-6284 is caused by a buffer overflow in the Conference Control Protocol API implementation.
Which Cisco TelePresence Server versions are affected by CVE-2015-6284?
Affected versions of Cisco TelePresence Server software include versions prior to 4.1(2.33) across various released versions.
Can CVE-2015-6284 be exploited remotely?
Yes, CVE-2015-6284 can be exploited remotely through a crafted URL sent to vulnerable devices.