NetSight
medium4.3

CVE-2015-0747

Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID C…

Impact

Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID CSCuh25408.

Affected products

VendorProductAffected versions
CiscoVideoscape Conductor
Version 3.0
CiscoHeadend Digital Broadband Delivery System
All versions
CiscoHeadend System Release
Versions 2.5, 2.7, 3.2, 3.5, 3.7, i4.3

Weakness classification

References