Denial of service - CVE-2015-7705
Published: September 22, 2016
Vulnerability identifier: #VU624
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-7705
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to cause denial of service on the target system.
The weakness exists due to security bypass in NTP and allows attackers to perform DoS attack.
Successful exploitation of the vulnerability may result in denial of service on the vulnerable system.
The weakness exists due to security bypass in NTP and allows attackers to perform DoS attack.
Successful exploitation of the vulnerability may result in denial of service on the vulnerable system.
Affected software
SIMATIC NET CP 443-1 OPC UA
How to mitigate CVE-2015-7705
To resolve the vulnerability HPE has released the software available at the site:
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05270839
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05270839