CVE-2015-6310: Medium severity cisco unified communications manager im and presence vulnerability

Published Oct 8, 2015

Updated

The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy service restart) via a crafted HTTP request, aka Bug ID CSCuw31632.

Affected Software

1 affected component

Cisco Unified Communications Manager IM and Presence Service=11.5\(1\)

Event History

Oct 8, 2015

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6310?

CVE-2015-6310 has a medium severity rating as it allows remote attackers to restart the SIP proxy service.

How do I fix CVE-2015-6310?

To mitigate CVE-2015-6310, it's recommended to update to the latest version of Cisco Unified Communications Manager IM and Presence Service beyond 11.5(1).

Who is affected by CVE-2015-6310?

CVE-2015-6310 affects users of Cisco Unified Communications Manager IM and Presence Service version 11.5(1).

What type of attack does CVE-2015-6310 involve?

CVE-2015-6310 involves a denial of service attack through a crafted HTTP request that causes the SIP proxy service to restart.

What version of software is vulnerable in CVE-2015-6310?

The vulnerable version in CVE-2015-6310 is Cisco Unified Communications Manager IM and Presence Service 11.5(1).