CVE-2015-6272

Published: Aug 31, 2015Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064.

Affected (8)

Products: Cisco: Ios Xe

Cisco

1 product

Ios Xe

Configuration A

8 vulnerable · 7 platform

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 2.1.0
Cisco Ios Xe	Version 2.1.1
Cisco Ios Xe	Version 2.1.2
Cisco Ios Xe	Version 2.1.3
Cisco Ios Xe	Version 2.2.1
Cisco Ios Xe	Version 2.2.2
Cisco Ios Xe	Version 2.2.3
Cisco Ios Xe	Version 2.3.0

Running on/with	Platform Versions
Cisco Asr 1001	All versions
Cisco Asr 1001 X	All versions
Cisco Asr 1002	All versions
Cisco Asr 1002 X	All versions
Cisco Asr 1004	All versions
Cisco Asr 1006	All versions
Cisco Asr 1013	All versions

Related CWEs

CWE-399

References (4)

http://tools.cisco.com/security/center/viewAlert.x?alertId=40689

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1033410

Source: psirt@cisco.com

http://tools.cisco.com/security/center/viewAlert.x?alertId=40689

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1033410

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.