Lucene search

K
cveCiscoCVE-2015-4275
HistoryJul 16, 2015 - 7:59 p.m.

CVE-2015-4275

2015-07-1619:59:02
CWE-399
cisco
web.nvd.nist.gov
21
cisco
asr 5000
pgw
dos
gtpv2
cve-2015-4275

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

56.0%

The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534.

Affected configurations

Nvd
Node
ciscoasr_5000_series_softwareMatch18.0.0.59167
OR
ciscoasr_5000_series_softwareMatch18.0.0.59211
VendorProductVersionCPE
ciscoasr_5000_series_software18.0.0.59167cpe:2.3:a:cisco:asr_5000_series_software:18.0.0.59167:*:*:*:*:*:*:*
ciscoasr_5000_series_software18.0.0.59211cpe:2.3:a:cisco:asr_5000_series_software:18.0.0.59211:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

56.0%

Related for CVE-2015-4275