CVE-2015-6277

Published: Sep 2, 2015Modified: May 6, 2026

6.1

Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 6.5 / Impact: 6.9

Source: NVD

Description

The ARP implementation in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 5.2(1)SV3(1.4), Nexus 3000 devices 7.3(0)ZD(0.47), Nexus 4000 devices 4.1(2)E1, Nexus 9000 devices 7.3(0)ZD(0.61), and MDS 9000 devices 7.0(0)HSK(0.353) and SAN-OS NX-OS on MDS 9000 devices 7.0(0)HSK(0.353) allows remote attackers to cause a denial of service (ARP process restart) via crafted packet-header fields, aka Bug ID CSCut25292.

Affected (7)

Products: Cisco: Nx Os, San Os, Mds 9000, 1000v

4 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Nx Os	Version 7.3(0)zd(0.47)

Running on/with	Platform Versions
Cisco Nexus 3000	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Nx Os	Version 4.1(2)e1

Running on/with	Platform Versions
Cisco Nexus 4000	All versions

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Nx Os	Version 7.0(0)hsk(0.353)
Cisco San Os	Version 7.0(0)hsk(0.353)
Cisco Mds 9000	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Nx Os	Version 7.3(0)zd(0.61)

Running on/with	Platform Versions
Cisco Nexus 9000	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Cisco 1000v	Version 5.2(1)sv3(1.4)

Related CWEs

CWE-399

References (4)

http://tools.cisco.com/security/center/viewAlert.x?alertId=40748

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1033443

Source: psirt@cisco.com

http://tools.cisco.com/security/center/viewAlert.x?alertId=40748

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1033443

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.