CVE-2015-0747 Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco videoscape conductor | = 3.0 | No fix listed |
| cisco headend digital broadband delivery system | All versions | No fix listed |
| cisco headend system release | = 2.5 | No fix listed |
| cisco headend system release | = 2.7 | No fix listed |
| cisco headend system release | = 3.2 | No fix listed |
| cisco headend system release | = 3.5 | No fix listed |
| cisco headend system release | = 3.7 | No fix listed |
| cisco headend system release | = i4.3 | No fix listed |
References
- 20150529 Cisco Conductor for Videoscape and Cisco Headend System Release HTTP Injection Vulnerability vendor-advisory
- 1032447 third-party-advisory vdb-entry