Lucene search
CiscoCVE-2015-4277HistoryAug 19, 2015 - 6:59 p.m.
CVE-2015-4277
2015-08-1918:59:00
CWE-399
cisco
web.nvd.nist.gov
26
cisco
asr 9000
denial of service
cve-2015-4277
nvd
bug id cscut93842
information security
CVSS2
4.9
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.6
Confidence
Low
EPSS
0
Percentile
5.1%
The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service (tmp/*config file creation, memory consumption, and device hang) via unspecified vectors, aka Bug ID CSCut93842.
Affected configurations
Node
cisconx-osMatch5.1.3
ORcisconx-osMatch5.3.0
cisconexus_93120txMatch-
ORcisconexus_93128txMatch-
ORcisconexus_9332pqMatch-
ORcisconexus_9336pq_aci_spineMatch-
ORcisconexus_9372pxMatch-
ORcisconexus_9372txMatch-
ORcisconexus_9396pxMatch-
ORcisconexus_9396txMatch-
ORcisconexus_9504Match-
ORcisconexus_9508Match-
ORcisconexus_9516Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | nx-os | 5.1.3 | cpe:2.3:o:cisco:nx-os:5.1.3:*:*:*:*:*:*:* |
| cisco | nx-os | 5.3.0 | cpe:2.3:o:cisco:nx-os:5.3.0:*:*:*:*:*:*:* |
| cisco | nexus_93120tx | - | cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:* |
| cisco | nexus_93128tx | - | cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:* |
| cisco | nexus_9332pq | - | cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:* |
| cisco | nexus_9336pq_aci_spine | - | cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:* |
| cisco | nexus_9372px | - | cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:* |
| cisco | nexus_9372tx | - | cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:* |
| cisco | nexus_9396px | - | cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:* |
| cisco | nexus_9396tx | - | cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-4277
2015-08-19 18:00:00
cisco
cisco
prion
prion
Design/Logic Flaw
2015-08-19 18:59:00
nessus
nessus
nvd
nvd
CVE-2015-4277
2015-08-19 18:59:00
CVSS2
4.9
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.6
Confidence
Low
EPSS
0
Percentile
5.1%
Related for CVE-2015-4277