Lucene search

K
cveCiscoCVE-2015-4200
HistoryJun 23, 2015 - 12:59 p.m.

CVE-2015-4200

2015-06-2312:59:00
CWE-399
cisco
web.nvd.nist.gov
34
cisco
ios
cve-2015-4200
memory leak
ipv6
ipv4
denial of service
nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

High

EPSS

0.003

Percentile

65.8%

Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (memory consumption) by triggering an error during CPE negotiation, aka Bug ID CSCug00885.

Affected configurations

Nvd
Node
ciscoiosMatch15.3\(3\)s
OR
ciscoiosMatch15.3s
VendorProductVersionCPE
ciscoios15.3(3)scpe:2.3:o:cisco:ios:15.3\(3\)s:*:*:*:*:*:*:*
ciscoios15.3scpe:2.3:o:cisco:ios:15.3s:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

High

EPSS

0.003

Percentile

65.8%

Related for CVE-2015-4200