CVE-2015-4291

Published: Aug 1, 2015Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted series of fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCtd72617.

Affected (13)

Products: Cisco: Ios Xe

Cisco

1 product

Ios Xe

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 2.1.0
Cisco Ios Xe	Version 2.1.1
Cisco Ios Xe	Version 2.1.2
Cisco Ios Xe	Version 2.2.1
Cisco Ios Xe	Version 2.2.2
Cisco Ios Xe	Version 2.2.3
Cisco Ios Xe	Version 2.3.0
Cisco Ios Xe	Version 2.3.0t
Cisco Ios Xe	Version 2.3.1t
Cisco Ios Xe	Version 2.3.2
Cisco Ios Xe	Version 2.4.0
Cisco Ios Xe	Version 2.4.1
Cisco Ios Xe	Version 2.5.0

Related CWEs

CWE-399

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150730-asr1k

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1033131

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150730-asr1k

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1033131

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.