CVE-2015-0725 (CNNVD-201507-637)
HIGH
中文标题:
多款Cisco产品输入验证漏洞
英文标题:
Cisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS is...
CVSS分数:
7.8
发布时间:
2015-07-16 21:00:00
漏洞类型:
授权问题
状态:
PUBLISHED
数据质量分数:
0.30
数据版本:
v3
漏洞描述
中文描述:
Cisco Videoscape Distribution Suite Service Broker（又名VDS-SB）和Videoscape Distribution Suite for Internet Streaming（又名VDS-IS或CDS-IS）都是美国思科（Cisco）公司的产品。前者是一套由内容分发网络（CDN）服务代理的业务整合和CDN服务选择跨多个CDN的高速缓存和路由的双重解决方案。后者是一套思科内容分发系统网络流媒体解决方案。 运行在Cisco Unified Computing System平台上的Cisco VDS-SB和VDS-IS 3.3.1 R7之前的版本和4.0.0 R4之前的版本中存在拒绝服务漏洞，该漏洞源于程序没有正确验证输入。远程攻击者可通过发送特制的HTTP请求利用该漏洞造成拒绝服务（设备重载）。
英文描述:
Cisco Videoscape Distribution Suite Service Broker (aka VDS-SB), when a VDSM configuration on UCS is used, and Videoscape Distribution Suite for Internet Streaming (aka VDS-IS or CDS-IS) before 3.3.1 R7 and 4.x before 4.0.0 R4 allow remote attackers to cause a denial of service (device reload) via a crafted HTTP request, aka Bug IDs CSCus79834 and CSCuu63409.
CWE类型:
CWE-20
标签:
（暂无数据）
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| cisco | videoscape_distribution_suite_service_broker | 1.0.1 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_service_broker:1.0.1:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_service_broker | 1.0_base | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_service_broker:1.0_base:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_service_broker | 1.1_base | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_service_broker:1.1_base:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 1.0.0 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:1.0.0:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.0\(1\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.0\(1\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.0\(3\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.0\(3\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.2\(1\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.2\(1\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.4\(1\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.4\(1\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.4\(3\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.4\(3\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.4\(5\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.4\(5\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.5\(1\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.5\(1\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.5\(3\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.5\(3\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.5\(7\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.5\(7\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.5\(9\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.5\(9\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.5\(11\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.5\(11\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.6\(1\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6\(1\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.6\(3\) | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6\(3\):*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.6\(3\)_b26 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6\(3\)_b26:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.6\(3\)_b35 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6\(3\)_b35:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.6\(3\)_b39 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6\(3\)_b39:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.6\(3\)_b45 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6\(3\)_b45:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.6\(3\)_b47 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6\(3\)_b47:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 2.6\(3\)_b50 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:2.6\(3\)_b50:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.0.0 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.0.0:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.1.2 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.1.2_b17 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2_b17:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.1.2_b26 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2_b26:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.1.2_b34 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2_b34:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.1.2_b54 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2_b54:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.1.2_b60 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.1.2_b60:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.2.0 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.0:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.2.0_b26 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.0_b26:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.2.1 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.1:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.2.1_b9 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.1_b9:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.2.1_b15 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.1_b15:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.2.1_b20 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.2.1_b20:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.3.0 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.0:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 3.3.1 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:3.3.1:*:*:*:*:*:*:*
|
| cisco | videoscape_distribution_suite_for_internet_streaming | 4.0.0 | - | - |
cpe:2.3:a:cisco:videoscape_distribution_suite_for_internet_streaming:4.0.0:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
CVSS评分详情
7.8
HIGH
CVSS向量:
AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS版本:
2.0
机密性
NONE
完整性
NONE
可用性
COMPLETE
时间信息
发布时间:
2015-07-16 21:00:00
修改时间:
2024-08-06 04:17:32
创建时间:
2025-11-11 15:33:58
更新时间:
2025-11-11 15:52:07
利用信息
暂无可利用代码信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2015-0725 |
2025-11-11 15:18:53 | 2025-11-11 07:33:58 |
| NVD | nvd_CVE-2015-0725 |
2025-11-11 14:54:51 | 2025-11-11 07:42:41 |
| CNNVD | cnnvd_CNNVD-201507-637 |
2025-11-11 15:09:35 | 2025-11-11 07:52:07 |
版本与语言
当前版本:
v3
主要语言:
EN
支持语言:
EN
ZH
安全公告
暂无安全公告信息
变更历史
v3
CNNVD
2025-11-11 15:52:07
vulnerability_type: 未提取 → 授权问题; cnnvd_id: 未提取 → CNNVD-201507-637; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-201507-637
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:42:41
severity: SeverityLevel.MEDIUM → SeverityLevel.HIGH; cvss_score: 未提取 → 7.8; cvss_vector: NOT_EXTRACTED → AV:N/AC:L/Au:N/C:N/I:N/A:C; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 39; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.HIGH
- cvss_score: 未提取 -> 7.8
- cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:N/C:N/I:N/A:C
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 39
- data_sources: ['cve'] -> ['cve', 'nvd']