Every CVESearch/Get API key

CVE-2015-6410

The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications...

4.0 Medium

CVE-2015-6410 is a medium vulnerability (CVSS 4.0) in Cisco Telepresence Video Communication Server Software, published December 14, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 77th percentile. No source names a fixed version.

Severity
4.0 MediumCVSS 2.0, NVD
Exploit chance
1.68%EPSS, 77th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.

Exploit likelihood

1.68%Up 0.6 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used4.0

The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.

Record
CVE-2015-6410
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:P/I:N/A:N
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.

Record
CVE-2015-6410
Updated
2026-11-02
EUVDEUVD-2015-6352No score

The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.

Record
EUVD-2015-6352
Updated
2026-11-03
GitHub AdvisoriesGHSA-vjgm-xxw7-95f8No score

The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications...

The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validation, which allows remote attackers to bypass intended call-reception and call-setup restrictions by spoofing a user, aka Bug ID CSCuu97283.

Record
GHSA-vjgm-xxw7-95f8
Weakness
CWE-20
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open