Cisco Headend Digital Broadband Delivery System vulnerabilities

7 CVEs affecting Cisco Headend Digital Broadband Delivery System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0759, published 2015-06-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0744, published 2015-05-30. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood…
CVE-2015-0743, published 2015-05-30. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka Bug ID CSCus04097.
CVE-2015-0745, published 2015-05-30. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug…
CVE-2015-0747, published 2015-05-30. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.
CVE-2015-0733, published 2015-05-30. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP…
CVE-2015-0724, published 2015-05-15. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in dncs 7.0.0.12 in Cisco Headend Digital Broadband Delivery System allow remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2015-0759, published 2015-06-02. Medium severity, CVSS 6.8. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users.