CVE-2006-6489: The SISCO OSI stack, as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP, and po...

Security readout for executives and security teams

This CVE describes a remote denial-of-service condition in the SISCO OSI stack used by several control-system products. Malformed packets can make the affected application terminate and restart. For executives, the concern is service availability in operational technology environments, not data theft or code execution based on the provided sources. Exposure is most likely in legacy industrial control environments running the named SISCO-based MMS or ICCP products, or applications embedding the SISCO OSI stack. The source data does not define exact versions or complete product scope. Treat this as an availability risk for operational technology systems. Prioritize asset identification and vendor guidance review, especially where affected services are reachable outside tightly controlled control-system networks. Mitigation focus: Check SISCO and CERT guidance for vendor-confirmed fixes or workarounds.; Inventory control-system applications using the SISCO OSI stack.; Restrict OSI stack network access to trusted operational networks..

Prepared

Jun 29, 2026, 08:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.