Lucene search

CiscoCVE-2015-0593

HistoryFeb 13, 2015 - 2:59 a.m.

CVE-2015-0593

2015-02-1302:59:09

CWE-399

cisco

web.nvd.nist.gov

cisco

ios

zone-based firewall

cve-2015-0593

nvd

denial of service

vulnerability

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.007

Percentile

80.0%

JSON

The Zone-Based Firewall implementation in Cisco IOS 12.4(122)T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service (device reload) via crafted network traffic, aka Bug ID CSCul65003.

Affected configurations

Nvd

Node

ciscoiosMatch15.4\(1.12\)t

ciscoiosMatch15.4\(1.19\)t

VendorProductVersionCPE
ciscoios15.4(1.12)tcpe:2.3:o:cisco:ios:15.4\(1.12\)t:*:*:*:*:*:*:*
ciscoios15.4(1.19)tcpe:2.3:o:cisco:ios:15.4\(1.19\)t:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	15.4(1.12)t	cpe:2.3:o:cisco:ios:15.4\(1.12\)t:::::::*
cisco	ios	15.4(1.19)t	cpe:2.3:o:cisco:ios:15.4\(1.19\)t:::::::*

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0593

tools.cisco.com/security/center/viewAlert.x?alertId=37417

www.securityfocus.com/bid/72549

exchange.xforce.ibmcloud.com/vulnerabilities/100757

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.007

Percentile

80.0%

JSON

Related for CVE-2015-0593