Lucene search

CiscoCVE-2015-4203

HistoryJun 23, 2015 - 2:59 p.m.

CVE-2015-4203

2015-06-2314:59:01

CWE-362

cisco

web.nvd.nist.gov

cisco

ios

12.2sch

ubr10000

denial of service

cve-2015-4203

nvd

vulnerability

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

65.8%

JSON

Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.

Affected configurations

Nvd

Node

ciscoiosMatch12.2\(33\)sch

ciscoiosMatch12.2sch

AND

ciscoubr10000_cable_modem_termination_systemMatch-

VendorProductVersionCPE
ciscoios12.2(33)schcpe:2.3:o:cisco:ios:12.2\(33\)sch:*:*:*:*:*:*:*
ciscoios12.2schcpe:2.3:o:cisco:ios:12.2sch:*:*:*:*:*:*:*
ciscoubr10000_cable_modem_termination_system-cpe:2.3:h:cisco:ubr10000_cable_modem_termination_system:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	12.2(33)sch	cpe:2.3:o:cisco:ios:12.2\(33\)sch:::::::*
cisco	ios	12.2sch	cpe:2.3:o:cisco:ios:12.2sch:::::::*
cisco	ubr10000_cable_modem_termination_system	-	cpe:2.3:h:cisco:ubr10000_cable_modem_termination_system:-:::::::*

References

tools.cisco.com/security/center/viewAlert.x?alertId=39439

www.securityfocus.com/bid/75339

www.securitytracker.com/id/1032692

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

65.8%

JSON

Related for CVE-2015-4203