Lucene search

CiscoCVE-2015-6256

HistoryAug 22, 2015 - 5:59 p.m.

CVE-2015-6256

2015-08-2217:59:01

CWE-20

cisco

web.nvd.nist.gov

cisco

asr 5000

remote

denial of service

vulnerability

ospf

exploit

nvd

cve-2015-6256

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

48.6%

JSON

Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service (OSPF process restart) via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820.

Affected configurations

Nvd

Node

ciscoasr_5000_series_softwareMatch19.0.m0.60828

VendorProductVersionCPE
ciscoasr_5000_series_software19.0.m0.60828cpe:2.3:a:cisco:asr_5000_series_software:19.0.m0.60828:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	asr_5000_series_software	19.0.m0.60828	cpe:2.3:a:cisco:asr_5000_series_software:19.0.m0.60828:::::::*

References

tools.cisco.com/security/center/viewAlert.x?alertId=40585

www.securitytracker.com/id/1033355

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

48.6%

JSON

Related for CVE-2015-6256