CVE-2015-0744

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood or (2) another type of TCP traffic flood, aka Bug IDs CSCus50642, CSCus50662, CSCus50625, CSCus50657, and CSCus68315.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=38943Vendor Advisory
http://www.securityfocus.com/bid/74916Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1032445Third Party Advisory, VDB Entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=38943Vendor Advisory
http://www.securityfocus.com/bid/74916Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1032445Third Party Advisory, VDB Entry

Timeline

Published: May 30, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-07455.0Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive info CVE-2015-07465.0The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending m CVE-2015-07474.3Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP re CVE-2015-07496.1A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (X CVE-2015-07506.5The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execu CVE-2015-07517.8Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of s CVE-2015-07524.3Cross-site scripting (XSS) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to inject arb CVE-2015-07536.8SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote CVE-2015-07547.5Cisco Finesse 10.5(1) allows remote authenticated users to obtain sensitive information or cause a denial of service (CPU and memory consump CVE-2015-07556.8The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local CVE-2015-07566.1Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking CVE-2015-07575.0The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allo