Lucene search

K
nvd[email protected]NVD:CVE-2015-6272
HistoryAug 31, 2015 - 8:59 p.m.

CVE-2015-6272

2015-08-3120:59:06
CWE-399
web.nvd.nist.gov
3

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.002

Percentile

56.0%

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064.

Affected configurations

Nvd
Node
ciscoios_xeMatch2.1.0
OR
ciscoios_xeMatch2.1.1
OR
ciscoios_xeMatch2.1.2
OR
ciscoios_xeMatch2.1.3
OR
ciscoios_xeMatch2.2.1
OR
ciscoios_xeMatch2.2.2
OR
ciscoios_xeMatch2.2.3
OR
ciscoios_xeMatch2.3.0
AND
ciscoasr_1001Match-
OR
ciscoasr_1001-xMatch-
OR
ciscoasr_1002Match-
OR
ciscoasr_1002-xMatch-
OR
ciscoasr_1004Match-
OR
ciscoasr_1006Match-
OR
ciscoasr_1013Match-
VendorProductVersionCPE
ciscoios_xe2.1.0cpe:2.3:o:cisco:ios_xe:2.1.0:*:*:*:*:*:*:*
ciscoios_xe2.1.1cpe:2.3:o:cisco:ios_xe:2.1.1:*:*:*:*:*:*:*
ciscoios_xe2.1.2cpe:2.3:o:cisco:ios_xe:2.1.2:*:*:*:*:*:*:*
ciscoios_xe2.1.3cpe:2.3:o:cisco:ios_xe:2.1.3:*:*:*:*:*:*:*
ciscoios_xe2.2.1cpe:2.3:o:cisco:ios_xe:2.2.1:*:*:*:*:*:*:*
ciscoios_xe2.2.2cpe:2.3:o:cisco:ios_xe:2.2.2:*:*:*:*:*:*:*
ciscoios_xe2.2.3cpe:2.3:o:cisco:ios_xe:2.2.3:*:*:*:*:*:*:*
ciscoios_xe2.3.0cpe:2.3:o:cisco:ios_xe:2.3.0:*:*:*:*:*:*:*
ciscoasr_1001-cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*
ciscoasr_1001-x-cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 151

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.002

Percentile

56.0%

Related for NVD:CVE-2015-6272