CVE-2015-4049 - CVE House
Back to Database
Status published Medium CVE-2015-4049

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems...

Vulnerability Description

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service (data corruption or system crash) via vectors related to using program operators during EPSILON (level 5) based codefiles at peak memory usage, which triggers CPM stack corruption.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-4049

Credits & Attribution

No credits recorded in the NVD database.

References

More from unisys

View All →
CVE-2022-32555
Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before...
Unknown 0
CVE-2021-45445
Unisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0...
High 7.5
CVE-2021-43394
Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and...
Critical 9.8
CVE-2021-43388
Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store...
High 7.5
CVE-2021-3141
In Unisys Stealth (core) before 6.0.025.0, the Keycloak password is...
High 7.8

Affected Vendor

Affected Software

mcp-firmware
Vulnerable Versions:
40.0

Timeline

Official Publish: February 3rd, 2017
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.