CVE-2015-0745 Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID...
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco headend digital broadband delivery system | All versions | No fix listed |
| cisco headend system release | = 2.5 | No fix listed |
| cisco headend system release | = 2.7 | No fix listed |
| cisco headend system release | = 3.2 | No fix listed |
| cisco headend system release | = 3.5 | No fix listed |
| cisco headend system release | = 3.7 | No fix listed |
| cisco headend system release | = i4.3 | No fix listed |
References
- 20150529 Cisco Headend System Release Archive File Download Vulnerability vendor-advisory
- 1032445 third-party-advisory vdb-entry