CVE-2015-6006

The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226 might allow remote attackers to execute arbitrary code or cause a denial of service (integer truncation and heap-based buffer overflow) via a crafted packet on port 8190.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.67% chance of exploitation in the next 30 days, 89th percentile

Published

2015-10-29

Updated

2024-08-06

Proof-of-concept exploits (1)

• securifera/CVE-2015-2900-Exploit6★ · 2016-01-06

References

• CVE Record
• NVD entry

Related

• CVE-2015-2898
• CVE-2015-2900
• CVE-2015-8277
• CVE-2016-3962
• CVE-2016-3989
• CVE-2017-18044