CVE-2015-0708

Published: Apr 29, 2015Modified: May 6, 2026

6.1

Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 6.5 / Impact: 6.9

Source: NVD

Description

Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956.

Affected (10)

Products: Cisco: Ios Xe, Ios

Cisco

2 products

Ios Xe

Ios

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 3.13s.0
Cisco Ios Xe	Version 3.13s.1
Cisco Ios Xe	Version 3.14s.0

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 15.4(3)s1
Cisco Ios	Version 15.4(3)s
Cisco Ios	Version 15.4(3)sn1
Cisco Ios	Version 15.4s
Cisco Ios	Version 15.4sn
Cisco Ios	Version 15.5(1)s
Cisco Ios	Version 15.5s

Related CWEs

CWE-399

References (4)

http://tools.cisco.com/security/center/viewAlert.x?alertId=38543

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1032210

Source: psirt@cisco.com

http://tools.cisco.com/security/center/viewAlert.x?alertId=38543

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1032210

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.