Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2015-6574: Sisco MMS‑EASE and AX‑S4 ICCP firmware can be stalled
CVE-2015-6574 · published 9 years ago
Summary
The SNAP Lite component in certain Sisco MMS‑EASE and AX‑S4 ICCP firmware can be forced to use excessive CPU when it receives a specially crafted network packet. This can slow or stop the device, disrupting service. Apply the latest firmware updates from Sisco that fix the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| sisco | mms-ease_firmware |
11.2000 cpe:2.3:a:sisco:mms-ease_firmware:11.2000:*:*:*:*:*:*:* |
| sisco | ax-s4_iccp_firmware |
6.0000 cpe:2.3:a:sisco:ax-s4_iccp_firmware:6.0000:*:*:*:*:*:*:* |
Original advisory text
The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.
The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.
References
- http://www.securityfocus.com/bid/95022
- https://cert-portal.siemens.com/productcert/pdf/ssa-223771.pdf
- https://www.portcullis-security.com/security-research-and-downloads/security-adv... Exploit Third Party Advisory VDB Entry
- https://www.sisconet.com/wp-content/uploads/2016/04/SecNote_CVE-2015-6574-Portcu... Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-399Resource Management Errors
Timeline
Published15 Dec 2016
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2015-6574 · NVD
Track software like this
Free during beta