CVE:CVE-2015-0747
CNNVD:CNNVD-201505-598
Cisco Conductor for Videoscape和Cisco Headend System Release都是美国思科（Cisco）公司的产品。Cisco Conductor for Videoscape是一套融合了数字电视、线上内容、社交媒体和通信应用的视频平台。Cisco Headend System Release是一套宽带传输系统。
Cisco Conductor for Videoscape 3.0版本和Cisco Headend System Release中存在安全漏洞。远程攻击者可通过发送特制的HTTP请求利用该漏洞注入任意cookie。
solution:Upgrade cisco videoscape_conductor to a higher version than 3.0,and avoid the version 3.0; Upgrade cisco headend_digital_broadband_delivery_system to a higher version than -; Upgrade cisco headend_system_release to a higher version than 2.5,2.7,3.2,3.5,3.7,i4.3,and avoid the version 2.5,2.7,3.2,3.5,3.7,i4.3