Lucene search

CiscoCVE-2015-6263

HistoryOct 12, 2015 - 1:59 a.m.

CVE-2015-6263

2015-10-1201:59:20

CWE-399

cisco

web.nvd.nist.gov

cisco

ios

radius

client

remote servers

denial of service

malformed answers

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

34.4%

JSON

The RADIUS client implementation in Cisco IOS 15.4(3)M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service (device reload) via malformed answers, aka Bug ID CSCuu59324.

Affected configurations

Nvd

Node

ciscoiosMatch15.4\(3\)m2.2

VendorProductVersionCPE
ciscoios15.4(3)m2.2cpe:2.3:o:cisco:ios:15.4\(3\)m2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	15.4(3)m2.2	cpe:2.3:o:cisco:ios:15.4\(3\)m2.2:::::::*

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151005-ios-radius

www.securitytracker.com/id/1033747

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

34.4%

JSON

Related for CVE-2015-6263