Lucene search

K
cveCiscoCVE-2015-6274
HistorySep 02, 2015 - 4:59 p.m.

CVE-2015-6274

2015-09-0216:59:02
CWE-119
cisco
web.nvd.nist.gov
24
cisco
asr 1000
ipv4
denial of service
vulnerability
cve-2015-6274
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

56.0%

The IPv4 implementation on Cisco ASR 1000 devices with software 15.5(3)S allows remote attackers to cause a denial of service (ESP QFP CPU consumption) by triggering packet fragmentation and reassembly, aka Bug ID CSCuv71273.

Affected configurations

Nvd
Node
ciscoasr_1000_series_softwareMatch15.5\(3\)s
AND
ciscoasr_1000Match-
VendorProductVersionCPE
ciscoasr_1000_series_software15.5(3)scpe:2.3:a:cisco:asr_1000_series_software:15.5\(3\)s:*:*:*:*:*:*:*
ciscoasr_1000-cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

56.0%

Related for CVE-2015-6274