Lucene search

K
cveCiscoCVE-2015-6334
HistoryOct 16, 2015 - 1:59 a.m.

CVE-2015-6334

2015-10-1601:59:08
CWE-20
cisco
web.nvd.nist.gov
26
cisco
asr 5000
asr 5500
denial of service
tacacs
vulnerability
cve-2015-6334
bug id cscuw01984

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

48.6%

Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service (vpnmgr process restart) via a crafted header in a TACACS packet, aka Bug ID CSCuw01984.

Affected configurations

Nvd
Node
ciscoasr_5000_softwareMatch18.0.0.57828
OR
ciscoasr_5000_softwareMatch19.0.m0.61045
VendorProductVersionCPE
ciscoasr_5000_software18.0.0.57828cpe:2.3:o:cisco:asr_5000_software:18.0.0.57828:*:*:*:*:*:*:*
ciscoasr_5000_software19.0.m0.61045cpe:2.3:o:cisco:asr_5000_software:19.0.m0.61045:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

48.6%

Related for CVE-2015-6334