CVE-2015-6420

high-risk

Published 2015-12-15

Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Service Provider; Unified Computing; Voice and Unified Communications Devices; Video, Streaming, TelePresence, and Transcoding Devices; Wireless; and Cisco Hosted Services products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Do I need to act?

21.2% chance of exploitation in next 30 days

EPSS score — higher than 79% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (2)

Commons Collections

Affected Vendors

Apache

References (21)

Third Party Advisory http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20...

Third Party Advisory http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Third Party Advisory http://www.securityfocus.com/bid/78872

Third Party Advisory https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c...

Vendor Advisory https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc...

Third Party Advisory https://www.kb.cert.org/vuls/id/581311

Third Party Advisory https://www.tenable.com/security/research/tra-2017-14

Third Party Advisory https://www.tenable.com/security/research/tra-2017-23

Third Party Advisory http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20...

Third Party Advisory http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Third Party Advisory http://www.securityfocus.com/bid/78872

Exploit https://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins...

Third Party Advisory https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c...

Vendor Advisory https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc...

Vendor Advisory https://news.apache.org/foundation/entry/apache_commons_statement_to_widespread

Third Party Advisory https://www.kb.cert.org/vuls/id/576313

Third Party Advisory https://www.kb.cert.org/vuls/id/581311

Third Party Advisory https://www.tenable.com/security/research/tra-2017-14

and 1 more references

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 14/34 · Moderate

Exposure 7/34 · Low