Skip to content
Fencer Intel
high 7.5

CVE-2015-6574 json

The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service (CPU consump…

published 2016-12-15 9 y ago modified 2026-06-17 4 mo ago also EUVD-2015-6513

cvss
7.5
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
5.4%
EPSS 5.4% chance of exploitation in 30 days, percentile 92%
public exploits
0
none known

Summary

The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-22-349-14 updated cvss 7.5

Siemens SISCO MMS-EASE Third Party Component

  • Siemens SIPROTEC 5 6MD85 (CP200) <V7.58 Siemens SIPROTEC 5 6MD85 (CP300) <V7.58 Siemens SIPROTEC 5 6MD86 (CP200) <V7.58 Siemens SIPROTEC 5 6MD86 (CP300) <V7.58
    affected: fixed in V7.58, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 6MD89 (CP300) <V7.80
    affected: fixed in V7.80, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7KE85 (CP200) <V7.80 Siemens SIPROTEC 5 7KE85 (CP300) <V7.80
    affected: fixed in V7.80, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SA82 (CP100) <V7.58 Siemens SIPROTEC 5 7SA84 (CP200) <V7.58 Siemens SIPROTEC 5 7SA86 (CP200) <V7.58 Siemens SIPROTEC 5 7SA86 (CP300) <V7.58 Siemens SIPROTEC 5 7SA87 (CP200) <V7.58 Siemens SIPROTEC 5 7SA87 (CP300) <V7.58
    +6 more products
    Siemens SIPROTEC 5 7SD82 (CP100) <V7.58 Siemens SIPROTEC 5 7SD84 (CP200) <V7.58 Siemens SIPROTEC 5 7SD86 (CP200) <V7.58 Siemens SIPROTEC 5 7SD86 (CP300) <V7.58 Siemens SIPROTEC 5 7SD87 (CP200) <V7.58 Siemens SIPROTEC 5 7SD87 (CP300) <V7.58
    affected: fixed in V7.58, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SJ81 (CP100) <V7.58 Siemens SIPROTEC 5 7SJ82 (CP100) <V7.58 Siemens SIPROTEC 5 7SJ85 (CP200) <V7.58 Siemens SIPROTEC 5 7SJ85 (CP300) <V7.58
    affected: fixed in V7.58, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SJ86 (CP200) <V7.58 Siemens SIPROTEC 5 7SJ86 (CP300) <V7.58
    affected: fixed in V7.58, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SK82 (CP100) <V7.58 Siemens SIPROTEC 5 7SK85 (CP200) <V7.58 Siemens SIPROTEC 5 7SK85 (CP300) <V7.58
    affected: fixed in V7.58, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SL82 (CP100) <V7.58 Siemens SIPROTEC 5 7SL86 (CP200) <V7.58 Siemens SIPROTEC 5 7SL86 (CP300) <V7.58 Siemens SIPROTEC 5 7SL87 (CP200) <V7.58 Siemens SIPROTEC 5 7SL87 (CP300) <V7.58
    affected: fixed in V7.58, mitigation support.industry.siemens.com
show 4 more

9 more affected in the full advisory

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

5.41% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • portcullis-security.com https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-6574/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 3.0 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C

Classification

Weakness
  • CWE-399 Resource Management Errors

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.