CVE-2015-6399

The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) allows remote authenticated users to cause a denial of service (IP interface outage) via crafted parameters in an HTTP request, aka Bug ID CSCuv38286.

Score

CVSS 2.0 6.8 Medium

Status

Modified - psirt@cisco.com

Published

2015-12-15

Last modified

2024-08-06

Weaknesses

CWE-399

Affected products

• Integrated Management Controller Supervisor (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151211-imc
• http://www.securityfocus.com/bid/108851
• http://www.securityfocus.com/bid/79031
• http://www.securitytracker.com/id/1038475