PT-2015-4846 · Cisco · Cisco Ios

Publicado 2015-05-14 · Atualizado 2017-01-06 · CVE-2015-0731

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.3S

Description The issue is related to the improper processing of malformed ISDN Q931 SETUP messages in the ISDN implementation, which can cause a denial of service (device reload). An unauthenticated, adjacent attacker can exploit this by sending malformed Q931 SETUP messages to the targeted device, resulting in a reload and a denial of service (DoS) condition. The attacker must be on the same broadcast or collision domain as the targeted device to exploit this issue.

Recommendations For Cisco IOS version 15.3S, update to a newer version that includes the software updates provided by Cisco to resolve the issue. As a temporary workaround, consider restricting access to the ISDN processing code to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-0731

Produtos afetados

Cisco Ios

Referências · 4

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38833 · Aviso do Fabricante
• http://securitytracker.com/id/1032337 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150514-CVE-2015-0731 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0731 · Nota de Segurança