CVE-2015-6284

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-09-20 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.1(2.33) on 7010, MSE 8710, Multiparty Media 310 and 320, and Virtual Machine devices allows remote attackers to cause a denial of service (device crash) via a crafted URL, aka Bug ID CSCuu28277.

Affected products

Cisco Telepresence Server Software: 2.3(1.55), 2.3(1.57), 3.0(2.24), 3.0(2.46), 3.0(2.48), 3.0(2.49) (+9)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-tps
http://www.securitytracker.com/id/1033580
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150916-tps
http://www.securitytracker.com/id/1033580

Get alerted when CVE-2015-6284 or the next vulnerability affects your stack