CVE-2015-0695

Published: Apr 17, 2015Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface (BVI) traffic, which allows remote attackers to cause a denial of service (chip and card hangs and reloads) by triggering use of a BVI interface for IPv4 packets, aka Bug ID CSCur62957.

Affected (9)

Products: Cisco: Ios Xr

Cisco

1 product

Ios Xr

Configuration A

9 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Cisco Ios Xr	Version 4.3.0
Cisco Ios Xr	Version 4.3.1
Cisco Ios Xr	Version 4.3.2
Cisco Ios Xr	Version 4.3.3
Cisco Ios Xr	Version 5.1.0
Cisco Ios Xr	Version 5.1.1
Cisco Ios Xr	Version 5.1.2
Cisco Ios Xr	Version 5.2.0
Cisco Ios Xr	Version 5.2.1

Running on/with	Platform Versions
Cisco Asr 9001	All versions
Cisco Asr 9006	All versions
Cisco Asr 9010	All versions
Cisco Asr 9904	All versions
Cisco Asr 9912	All versions
Cisco Asr 9922	All versions