CVE-2015-6399: Medium severity cisco integrated management controller supervisor vulnerability
Published Dec 15, 2015
·Updated
The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) allows remote authenticated users to cause a denial of service (IP interface outage) via crafted parameters in an HTTP request, aka Bug ID CSCuv38286.
Affected Software
2 affected components
cisco Integrated Management Controller Supervisor=1.0.0.0
cisco Integrated Management Controller Supervisor=1.0.0.1
Event History
Dec 15, 2015
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6399?
CVE-2015-6399 is classified as a denial of service vulnerability.
2
How do I fix CVE-2015-6399?
To fix CVE-2015-6399, upgrade Cisco Integrated Management Controller to version 2.0(9) or later.
3
Who is affected by CVE-2015-6399?
CVE-2015-6399 affects users of Cisco Integrated Management Controller Supervisor versions 1.0.0.0 and 1.0.0.1.
4
What type of vulnerability is CVE-2015-6399?
CVE-2015-6399 is a remote authenticated denial of service vulnerability.
5
What can attackers do with CVE-2015-6399?
Attackers can exploit CVE-2015-6399 to cause an IP interface outage on affected systems.