PT-2015-6360 · Mns · Mns

Published 2015-08-04 · Updated 2016-12-06 · CVE-2015-3961

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions MNS versions prior to 4.5.6

Description The issue allows remote authenticated users to cause a denial of service, resulting in memory corruption and reboot, via a crafted URL.

Recommendations For versions prior to 4.5.6, update to version 4.5.6 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-3961

Affected Products

Mns

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-3961 · Security Note
• http://garrettcom.com/techsupport/MNS6K_R456_Release_Notes.pdf · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-15-167-01 · Note
• http://securityfocus.com/bid/75228 · Note