CVE-2015-6285: Medium severity cisco email security appliance firmware vulnerability
Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service (memory overwrite or service outage) via format string specifiers in an HTTP request, aka Bug ID CSCug21497.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6285?
CVE-2015-6285 is classified as a medium severity vulnerability due to its potential for causing denial of service.
How do I fix CVE-2015-6285?
To fix CVE-2015-6285, upgrade to a patched version of Cisco Email Security Appliance firmware that addresses this vulnerability.
What are the affected software versions for CVE-2015-6285?
The affected software versions for CVE-2015-6285 are Cisco Email Security Appliance 7.6.0 and 8.0.0.
What type of attack does CVE-2015-6285 facilitate?
CVE-2015-6285 facilitates remote denial of service attacks through format string vulnerabilities in HTTP requests.
Is CVE-2015-6285 exploitable remotely?
Yes, CVE-2015-6285 is exploitable remotely by attackers sending specially crafted HTTP requests.