Cisco Headend System Release vulnerabilities
6 CVEs affecting Cisco Headend System Release, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4230, published 2015-07-06.
More from Cisco.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2015-4230, published 2015-07-06. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91854.
- CVE-2015-4227, published 2015-06-30. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCus91838.
- CVE-2015-0744, published 2015-05-30. High severity, CVSS 7.8. EPSS: 3.4% chance of exploitation in the next 30 days. Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and TCP service outage) via (1) a SYN flood…
- CVE-2015-0743, published 2015-05-30. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka Bug ID CSCus04097.
- CVE-2015-0745, published 2015-05-30. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in an HTTP request, aka Bug…
- CVE-2015-0747, published 2015-05-30. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.