CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
Percentile
56.0%
A vulnerability in the multicast DNS (mDNS) gateway function of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to reload the vulnerable device.
The vulnerability is due to improper validation of mDNS packets. An attacker could exploit this vulnerability by sending malformed IP version 4 (IPv4) or IP version 6 (IPv6) packets on UDP port 5353. An exploit could allow the attacker to cause a denial of service (DoS) condition.
Cisco has released software updates that address this vulnerability. This advisory is available at the following link:
Note: The March 25, 2015, Cisco IOS & XE Software Security Advisory bundled publication includes seven Cisco Security Advisories. The advisories address vulnerabilities in Cisco IOS Software and Cisco IOS XE Software. Individual publication links are in Cisco Event Response: Semiannual Cisco IOS & XE Software Security Advisory Bundled Publication at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar15.html[“http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_mar15.html”]
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | ios | 15.1sy | cpe:2.3:o:cisco:ios:15.1sy:*:*:*:*:*:*:* |
cisco | ios | 15.3s | cpe:2.3:o:cisco:ios:15.3s:*:*:*:*:*:*:* |
cisco | ios | 15.4t | cpe:2.3:o:cisco:ios:15.4t:*:*:*:*:*:*:* |
cisco | ios | 15.2e | cpe:2.3:o:cisco:ios:15.2e:*:*:*:*:*:*:* |
cisco | ios | 15.2jb | cpe:2.3:o:cisco:ios:15.2jb:*:*:*:*:*:*:* |
cisco | ios | 15.4s | cpe:2.3:o:cisco:ios:15.4s:*:*:*:*:*:*:* |
cisco | ios | 15.4m | cpe:2.3:o:cisco:ios:15.4m:*:*:*:*:*:*:* |
cisco | ios | 15.4sn | cpe:2.3:o:cisco:ios:15.4sn:*:*:*:*:*:*:* |
cisco | ios | 15.3jn | cpe:2.3:o:cisco:ios:15.3jn:*:*:*:*:*:*:* |
cisco | ios | 12.4jap | cpe:2.3:o:cisco:ios:12.4jap:*:*:*:*:*:*:* |