CVE-2015-0639

2015-03-2610:59:05

CWE-20

cisco

web.nvd.nist.gov

cisco

ios xe

cve-2015-0639

denial of service

remote attackers

ipv6

udp

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S, when MMON or NBAR is enabled, allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets with IPv4 UDP encapsulation, aka Bug ID CSCua79665.

Affected configurations

Nvd

Node

ciscoios_xeMatch3.6s

ciscoios_xeMatch3.6s.0

ciscoios_xeMatch3.6s.1

ciscoios_xeMatch3.6s.2

ciscoios_xeMatch3.7s

ciscoios_xeMatch3.7s.0

ciscoios_xeMatch3.7s.1

ciscoios_xeMatch3.7s.2

ciscoios_xeMatch3.7s.3

ciscoios_xeMatch3.7s.4

ciscoios_xeMatch3.7s.5

VendorProductVersionCPE
ciscoios_xe3.6scpe:2.3:o:cisco:ios_xe:3.6s:*:*:*:*:*:*:*
ciscoios_xe3.6s.0cpe:2.3:o:cisco:ios_xe:3.6s.0:*:*:*:*:*:*:*
ciscoios_xe3.6s.1cpe:2.3:o:cisco:ios_xe:3.6s.1:*:*:*:*:*:*:*
ciscoios_xe3.6s.2cpe:2.3:o:cisco:ios_xe:3.6s.2:*:*:*:*:*:*:*
ciscoios_xe3.7scpe:2.3:o:cisco:ios_xe:3.7s:*:*:*:*:*:*:*
ciscoios_xe3.7s.0cpe:2.3:o:cisco:ios_xe:3.7s.0:*:*:*:*:*:*:*
ciscoios_xe3.7s.1cpe:2.3:o:cisco:ios_xe:3.7s.1:*:*:*:*:*:*:*
ciscoios_xe3.7s.2cpe:2.3:o:cisco:ios_xe:3.7s.2:*:*:*:*:*:*:*
ciscoios_xe3.7s.3cpe:2.3:o:cisco:ios_xe:3.7s.3:*:*:*:*:*:*:*
ciscoios_xe3.7s.4cpe:2.3:o:cisco:ios_xe:3.7s.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	3.6s	cpe:2.3:o:cisco:ios_xe:3.6s:::::::*
cisco	ios_xe	3.6s.0	cpe:2.3:o:cisco:ios_xe:3.6s.0:::::::*
cisco	ios_xe	3.6s.1	cpe:2.3:o:cisco:ios_xe:3.6s.1:::::::*
cisco	ios_xe	3.6s.2	cpe:2.3:o:cisco:ios_xe:3.6s.2:::::::*
cisco	ios_xe	3.7s	cpe:2.3:o:cisco:ios_xe:3.7s:::::::*
cisco	ios_xe	3.7s.0	cpe:2.3:o:cisco:ios_xe:3.7s.0:::::::*
cisco	ios_xe	3.7s.1	cpe:2.3:o:cisco:ios_xe:3.7s.1:::::::*
cisco	ios_xe	3.7s.2	cpe:2.3:o:cisco:ios_xe:3.7s.2:::::::*
cisco	ios_xe	3.7s.3	cpe:2.3:o:cisco:ios_xe:3.7s.3:::::::*
cisco	ios_xe	3.7s.4	cpe:2.3:o:cisco:ios_xe:3.7s.4:::::::*