CVE-2015-6429

Published: Dec 19, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236.

Affected (18)

Products: Cisco: Ios, Ios Xe

Cisco

2 products

Ios

Ios Xe

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 15.4(3)s
Cisco Ios	Version 15.5(1)s
Cisco Ios	Version 15.5(1)t
Cisco Ios	Version 15.5(2)s
Cisco Ios	Version 15.5(2)t
Cisco Ios	Version 15.5(3)m1
Cisco Ios	Version 15.5(3)m
Cisco Ios	Version 15.5(3)s1
Cisco Ios	Version 15.5(3)s
Cisco Ios	Version 15.6(0.17)t
Cisco Ios	Version 15.6(1)t0a

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 3.15s.0
Cisco Ios Xe	Version 3.15s.1
Cisco Ios Xe	Version 3.15s.2
Cisco Ios Xe	Version 3.16s.0
Cisco Ios Xe	Version 3.16s.1
Cisco Ios Xe	Version 3.17s.0
Cisco Ios Xe	Version 3.17s.1

Related CWEs

CWE-19

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151218-ios

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1034505

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151218-ios

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1034505

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.