CVE-2015-0712

Published: May 1, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and packet loss) via malformed HTTP packets, aka Bug ID CSCud14217.

Affected (4)

Products: Cisco: Staros

Cisco

1 product

Staros

Configuration A

4 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Cisco Staros	Version 12.0
Cisco Staros	Version 12.2(300)
Cisco Staros	Version 14.0
Cisco Staros	Version 14.0(600)

Running on/with	Platform Versions
Cisco Asr 5000	All versions
Cisco Asr 5500	All versions
Cisco Asr 5700	All versions

Related CWEs

CWE-399

References (4)

http://tools.cisco.com/security/center/viewAlert.x?alertId=38580

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1032219

Source: psirt@cisco.com

http://tools.cisco.com/security/center/viewAlert.x?alertId=38580

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1032219

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.