Lucene search

K
cveCiscoCVE-2015-4291
HistoryAug 01, 2015 - 1:59 a.m.

CVE-2015-4291

2015-08-0101:59:16
CWE-399
cisco
web.nvd.nist.gov
42
cve-2015-4291
cisco
asr 1000
denial of service
ipv4
ipv6
nvd
vulnerability

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

56.0%

Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted series of fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCtd72617.

Affected configurations

Nvd
Node
ciscoios_xeMatch2.1.0
OR
ciscoios_xeMatch2.1.1
OR
ciscoios_xeMatch2.1.2
OR
ciscoios_xeMatch2.2.1
OR
ciscoios_xeMatch2.2.2
OR
ciscoios_xeMatch2.2.3
OR
ciscoios_xeMatch2.3.0
OR
ciscoios_xeMatch2.3.0t
OR
ciscoios_xeMatch2.3.1t
OR
ciscoios_xeMatch2.3.2
OR
ciscoios_xeMatch2.4.0
OR
ciscoios_xeMatch2.4.1
OR
ciscoios_xeMatch2.5.0
VendorProductVersionCPE
ciscoios_xe2.1.0cpe:2.3:o:cisco:ios_xe:2.1.0:*:*:*:*:*:*:*
ciscoios_xe2.1.1cpe:2.3:o:cisco:ios_xe:2.1.1:*:*:*:*:*:*:*
ciscoios_xe2.1.2cpe:2.3:o:cisco:ios_xe:2.1.2:*:*:*:*:*:*:*
ciscoios_xe2.2.1cpe:2.3:o:cisco:ios_xe:2.2.1:*:*:*:*:*:*:*
ciscoios_xe2.2.2cpe:2.3:o:cisco:ios_xe:2.2.2:*:*:*:*:*:*:*
ciscoios_xe2.2.3cpe:2.3:o:cisco:ios_xe:2.2.3:*:*:*:*:*:*:*
ciscoios_xe2.3.0cpe:2.3:o:cisco:ios_xe:2.3.0:*:*:*:*:*:*:*
ciscoios_xe2.3.0tcpe:2.3:o:cisco:ios_xe:2.3.0t:*:*:*:*:*:*:*
ciscoios_xe2.3.1tcpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:*
ciscoios_xe2.3.2cpe:2.3:o:cisco:ios_xe:2.3.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 131

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

56.0%