CVE-2015-0745

Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug ID CSCus44909.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 47%
VendorProductVersion
ciscoheadend_digital_broadband_delivery_system
-
ciscoheadend_system_release
2.5
ciscoheadend_system_release
2.7
ciscoheadend_system_release
3.2
ciscoheadend_system_release
3.5
ciscoheadend_system_release
3.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/viewAlert.x?alertId=38944
http://www.securitytracker.com/id/1032445
http://tools.cisco.com/security/center/viewAlert.x?alertId=38944
http://www.securitytracker.com/id/1032445