CVE-2015-0688

2015-04-0401:59:02

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.002

Percentile

56.0%

JSON

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module crash) via malformed H.323 packets, aka Bug ID CSCup21070.

Affected configurations

Nvd

Node

ciscoios_xeMatch13.10.2s

AND

ciscoasr_1001

ciscoasr_1001-x

ciscoasr_1002

ciscoasr_1002-x

ciscoasr_1004

ciscoasr_1006

ciscoasr_1013

VendorProductVersionCPE
ciscoios_xe13.10.2scpe:2.3:o:cisco:ios_xe:13.10.2s:*:*:*:*:*:*:*
ciscoasr_1001*cpe:2.3:h:cisco:asr_1001:*:*:*:*:*:*:*:*
ciscoasr_1001-x*cpe:2.3:h:cisco:asr_1001-x:*:*:*:*:*:*:*:*
ciscoasr_1002*cpe:2.3:h:cisco:asr_1002:*:*:*:*:*:*:*:*
ciscoasr_1002-x*cpe:2.3:h:cisco:asr_1002-x:*:*:*:*:*:*:*:*
ciscoasr_1004*cpe:2.3:h:cisco:asr_1004:*:*:*:*:*:*:*:*
ciscoasr_1006*cpe:2.3:h:cisco:asr_1006:*:*:*:*:*:*:*:*
ciscoasr_1013*cpe:2.3:h:cisco:asr_1013:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	13.10.2s	cpe:2.3:o:cisco:ios_xe:13.10.2s:::::::*
cisco	asr_1001	*	cpe:2.3:h:cisco:asr_1001::::::::
cisco	asr_1001-x	*	cpe:2.3:h:cisco:asr_1001-x::::::::
cisco	asr_1002	*	cpe:2.3:h:cisco:asr_1002::::::::
cisco	asr_1002-x	*	cpe:2.3:h:cisco:asr_1002-x::::::::
cisco	asr_1004	*	cpe:2.3:h:cisco:asr_1004::::::::
cisco	asr_1006	*	cpe:2.3:h:cisco:asr_1006::::::::
cisco	asr_1013	*	cpe:2.3:h:cisco:asr_1013::::::::