PT-2015-4753 · Cisco · Cisco Ios

Publicado 2015-02-11 · Atualizado 2017-09-08 · CVE-2015-0609

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.4(2)T3 and earlier

Description A race condition in the Common Classification Engine (CCE) of the Measurement, Aggregation, and Correlation Engine (MACE) implementation allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching. The vulnerability can be exploited by sending crafted traffic to an affected router, potentially requiring access to trusted, internal networks behind a firewall.

Recommendations For Cisco IOS versions 15.4(2)T3 and earlier, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2015-0609

Produtos afetados

Cisco Ios

Referências · 7

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150211-CVE-2015-0609 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=37420 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0609 · Nota de Segurança
• http://securitytracker.com/id/1031731 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0609 · Aviso do Fabricante
• http://securityfocus.com/bid/72564 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100809 · Nota