Lucene search

K
cveCiscoCVE-2015-0708
HistoryApr 29, 2015 - 1:59 a.m.

CVE-2015-0708

2015-04-2901:59:00
CWE-399
cisco
web.nvd.nist.gov
29
cisco
ios
ios xe
remote attackers
denial of service
dhcpv6
bug id cscur29956

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

52.2%

Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956.

Affected configurations

Nvd
Node
ciscoios_xeMatch3.13s.0
OR
ciscoios_xeMatch3.13s.1
OR
ciscoios_xeMatch3.14s.0
Node
ciscoiosMatch15.4\(3\)s
OR
ciscoiosMatch15.4\(3\)s1
OR
ciscoiosMatch15.4\(3\)sn1
OR
ciscoiosMatch15.4s
OR
ciscoiosMatch15.4sn
OR
ciscoiosMatch15.5\(1\)s
OR
ciscoiosMatch15.5s
VendorProductVersionCPE
ciscoios_xe3.13s.0cpe:2.3:o:cisco:ios_xe:3.13s.0:*:*:*:*:*:*:*
ciscoios_xe3.13s.1cpe:2.3:o:cisco:ios_xe:3.13s.1:*:*:*:*:*:*:*
ciscoios_xe3.14s.0cpe:2.3:o:cisco:ios_xe:3.14s.0:*:*:*:*:*:*:*
ciscoios15.4(3)scpe:2.3:o:cisco:ios:15.4\(3\)s:*:*:*:*:*:*:*
ciscoios15.4(3)s1cpe:2.3:o:cisco:ios:15.4\(3\)s1:*:*:*:*:*:*:*
ciscoios15.4(3)sn1cpe:2.3:o:cisco:ios:15.4\(3\)sn1:*:*:*:*:*:*:*
ciscoios15.4scpe:2.3:o:cisco:ios:15.4s:*:*:*:*:*:*:*
ciscoios15.4sncpe:2.3:o:cisco:ios:15.4sn:*:*:*:*:*:*:*
ciscoios15.5(1)scpe:2.3:o:cisco:ios:15.5\(1\)s:*:*:*:*:*:*:*
ciscoios15.5scpe:2.3:o:cisco:ios:15.5s:*:*:*:*:*:*:*

CVSS2

6.1

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

52.2%

Related for CVE-2015-0708