CVE-2015-0725

UnknownEPSS 1.94%

Last modified

CVE-2015-0725 is a vulnerability of currently unknown severity. Cisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming (aka VDS-IS or CDS-IS) before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug IDs CSCus79834 and CSCuu63409.. EPSS estimates a 1.94% chance of exploitation in the next 30 days.

Description

Cisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming (aka VDS-IS or CDS-IS) before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug IDs CSCus79834 and CSCuu63409.

Metrics

EPSS Probability
1.94%

77.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoVideoscape Distribution Suite Service Broker1.0.1
CiscoVideoscape Distribution Suite Service Broker1.0_base
CiscoVideoscape Distribution Suite Service Broker1.1_base
CiscoVideoscape Distribution Suite For Internet Streaming1.0.0
CiscoVideoscape Distribution Suite For Internet Streaming2.0\(1\)
CiscoVideoscape Distribution Suite For Internet Streaming2.0\(3\)
CiscoVideoscape Distribution Suite For Internet Streaming2.2\(1\)
CiscoVideoscape Distribution Suite For Internet Streaming2.4\(1\)
CiscoVideoscape Distribution Suite For Internet Streaming2.4\(3\)
CiscoVideoscape Distribution Suite For Internet Streaming2.4\(5\)
CiscoVideoscape Distribution Suite For Internet Streaming2.5\(1\)
CiscoVideoscape Distribution Suite For Internet Streaming2.5\(3\)
CiscoVideoscape Distribution Suite For Internet Streaming2.5\(7\)
CiscoVideoscape Distribution Suite For Internet Streaming2.5\(9\)
CiscoVideoscape Distribution Suite For Internet Streaming2.5\(11\)
CiscoVideoscape Distribution Suite For Internet Streaming2.6\(1\)
CiscoVideoscape Distribution Suite For Internet Streaming2.6\(3\)
CiscoVideoscape Distribution Suite For Internet Streaming2.6\(3\)_b26
CiscoVideoscape Distribution Suite For Internet Streaming2.6\(3\)_b35
CiscoVideoscape Distribution Suite For Internet Streaming2.6\(3\)_b39
CiscoVideoscape Distribution Suite For Internet Streaming2.6\(3\)_b45
CiscoVideoscape Distribution Suite For Internet Streaming2.6\(3\)_b47
CiscoVideoscape Distribution Suite For Internet Streaming2.6\(3\)_b50
CiscoVideoscape Distribution Suite For Internet Streaming3.0.0
CiscoVideoscape Distribution Suite For Internet Streaming3.1.2
CiscoVideoscape Distribution Suite For Internet Streaming3.1.2_b17
CiscoVideoscape Distribution Suite For Internet Streaming3.1.2_b26
CiscoVideoscape Distribution Suite For Internet Streaming3.1.2_b34
CiscoVideoscape Distribution Suite For Internet Streaming3.1.2_b54
CiscoVideoscape Distribution Suite For Internet Streaming3.1.2_b60
CiscoVideoscape Distribution Suite For Internet Streaming3.2.0
CiscoVideoscape Distribution Suite For Internet Streaming3.2.0_b26
CiscoVideoscape Distribution Suite For Internet Streaming3.2.1
CiscoVideoscape Distribution Suite For Internet Streaming3.2.1_b9
CiscoVideoscape Distribution Suite For Internet Streaming3.2.1_b15
CiscoVideoscape Distribution Suite For Internet Streaming3.2.1_b20
CiscoVideoscape Distribution Suite For Internet Streaming3.3.0
CiscoVideoscape Distribution Suite For Internet Streaming3.3.1
CiscoVideoscape Distribution Suite For Internet Streaming4.0.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2015-0725?
Cisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming (aka VDS-IS or CDS-IS) before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug IDs CSCus79834 and CSCuu63409.
How severe is CVE-2015-0725?
Severity scoring for CVE-2015-0725 is pending analysis. The EPSS model estimates a 1.94% probability of exploitation in the next 30 days.
How do I fix CVE-2015-0725?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2015-0725?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST