CVE-2015-6410: Input Validation
The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6410?
CVE-2015-6410 has a moderate severity rating due to its potential to allow remote attackers to bypass call-reception and call-setup restrictions.
How do I fix CVE-2015-6410?
To remediate CVE-2015-6410, ensure that you apply the latest security patches provided by Cisco for the affected software version.
What systems are vulnerable to CVE-2015-6410?
CVE-2015-6410 primarily affects Cisco Unified Communications Manager and related components, particularly those running Cisco TelePresence Video Communication Server Firmware x8.5-rc4.
What type of attack does CVE-2015-6410 allow?
CVE-2015-6410 allows remote attackers to spoof user identities, potentially enabling unauthorized call setups and receptions.
Who should be concerned about CVE-2015-6410?
Organizations using affected versions of Cisco Unified Communications Manager should be concerned about CVE-2015-6410 and take action to mitigate the vulnerability.