Lucene search

K
cveCiscoCVE-2015-0685
HistoryApr 03, 2015 - 2:00 a.m.

CVE-2015-0685

2015-04-0302:00:24
CWE-20
cisco
web.nvd.nist.gov
21
cisco
ios xe
asr 1000
denial of service
vulnerability
cve-2015-0685
nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

56.0%

Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service (device hang) via crafted IP packets, aka Bug ID CSCub31873.

Affected configurations

Nvd
Node
ciscoios_xeRange3.7s.4
VendorProductVersionCPE
ciscoios_xe*cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

56.0%

Related for CVE-2015-0685