PT-2015-4830 · Cisco · Cisco Ios+1

Publicado 2015-04-28 · Atualizado 2015-09-10 · CVE-2015-0709

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.5S and earlier Cisco IOS XE (affected versions not specified)

Description A denial of service issue exists due to improper processing of crafted RADIUS packets. An authenticated, remote attacker could exploit this by sending crafted packets to cause the device to crash. The attacker must authenticate to the device and may need additional information, such as the RADIUS secret and whether the device is configured with RADIUS Proxy.

Recommendations For Cisco IOS version 15.5S, update to a newer version that includes the fix for this issue. For Cisco IOS XE, update to a version that includes the software updates released by Cisco to address this issue. As a temporary workaround, consider restricting access to the RADIUS protocol on affected devices until a patch is available.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-0709

Produtos afetados

Cisco Ios

Cisco Ios Xe

Referências · 4

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38544 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0709 · Nota de Segurança
• http://securitytracker.com/id/1032211 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150428-CVE-2015-0709 · Nota