PT-2015-1432 · Cisco · Cisco Ios Xr+1

Publicado 2015-06-12 · Atualizado 2017-01-04 · CVE-2015-0776

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.0.1

Description The issue is related to resource management errors in the telnetd subcomponent of the Cisco IOS operating system. It can be exploited by a remote attacker using a specially crafted telnet packet, potentially leading to a denial of service, causing the device to reload.

Recommendations For Cisco IOS XR version 5.0.1, consider restricting access to the telnetd service until a patch is available to prevent potential exploitation. As a temporary workaround, limiting the exposure of the device to untrusted networks may also help minimize the risk of a denial of service attack.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2015-10548

CVE-2015-0776

Produtos afetados

Cisco Ios

Cisco Ios Xr

Referências · 4

• http://securitytracker.com/id/1032560 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0776 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-10548 · Nota de Segurança
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39293 · Aviso do Fabricante