CVE-2015-6006

CVE-2015-6006 describes a critical vulnerability in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226, specifically within its AddUserFinding implementation. This flaw allows unauthenticated remote attackers to execute arbitrary code or trigger a denial of service via a crafted packet sent to port 8190, stemming from integer truncation and a heap-based buffer overflow. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered some community discussion, indicating awareness among security researchers.