PT-2015-1032 · Cisco · Cisco Ios

Publicado 2015-03-25 · Atualizado 2015-03-26 · CVE-2015-0648

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 12.4, 15.0, 15.2, and 15.3

Description The issue allows remote attackers to cause a denial of service via crafted Common Industrial Protocol (CIP) TCP packets. This could result in memory consumption. Successful exploitation could allow an unauthenticated, remote attacker to cause a reload of the forwarding plane, resulting in an interruption of services on an affected device. Repeated exploitation could result in a sustained denial of service condition. Additionally, successful exploitation could allow an unauthenticated, remote attacker to cause a memory leak on an affected device.

Recommendations For Cisco IOS versions 12.2, 12.4, 15.0, 15.2, and 15.3, update to a version that includes the software updates released by Cisco to address these vulnerabilities. As a temporary workaround, consider restricting access to the CIP feature to minimize the risk of exploitation. Avoid using the CIP protocol until the issue is resolved.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-399

CWE-20

Identificadores relacionados

BDU:2015-09861

CVE-2015-0648

Produtos afetados

Cisco Ios

Referências · 5

• https://bdu.fstec.ru/vul/2015-09861 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-0648 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0648 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip · Aviso do Fabricante