CVE-2015-6310
UnknownEPSS 2.21%
Last modified
CVE-2015-6310 is a vulnerability of currently unknown severity. The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy service restart) via a crafted HTTP request, aka Bug ID CSCuw31632.. EPSS estimates a 2.21% chance of exploitation in the next 30 days.
Description
The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy service restart) via a crafted HTTP request, aka Bug ID CSCuw31632.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Communications Manager Im And Presence Service | 11.5\(1\) |
References
- http://www.securitytracker.com/id/1033732Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033732Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-6310?
The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy service restart) via a crafted HTTP request, aka Bug ID CSCuw31632.
How severe is CVE-2015-6310?
Severity scoring for CVE-2015-6310 is pending analysis. The EPSS model estimates a 2.21% probability of exploitation in the next 30 days.
How do I fix CVE-2015-6310?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-6304Cross-site request forgery (CSRF) vulnerability in Cisco Tel…
- CVE-2015-6305Untrusted search path vulnerability in the CMainThread::laun…
- CVE-2015-6306Cisco AnyConnect Secure Mobility Client 4.1(8) on OS X and L…
- CVE-2015-6307Cisco FirePOWER (formerly Sourcefire) 7000 and 8000 devices …
- CVE-2015-6308Cisco NX-OS 6.0(2)U6(0.46) on N3K devices allows remote auth…
- CVE-2015-6309Cisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042…
- CVE-2015-6311Cisco Wireless LAN Controller (WLC) devices with software 7.…
- CVE-2015-6312Cisco TelePresence Server 3.1 on 7010, Mobility Services Eng…
- CVE-2015-6313Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 701…
- CVE-2015-6314Cisco Wireless LAN Controller (WLC) devices with software 7.…
- CVE-2015-6315Cisco Aironet 1850 access points with software 8.1(112.4) al…
- CVE-2015-6316The default configuration of sshd_config in Cisco Mobility S…
Are you affected by CVE-2015-6310?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
