PT-2015-6494 · Cisco · Cisco Asr 5000

Publicado 2015-07-16 · Atualizado 2017-09-22 · CVE-2015-4275

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 devices with software versions 18.0.0.59167 and 18.0.0.59211

Description The issue allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet.

Recommendations For version 18.0.0.59167, update to a version that fixes the issue. For version 18.0.0.59211, update to a version that fixes the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-4275

Produtos afetados

Cisco Asr 5000

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-4275 · Nota de Segurança
• http://securitytracker.com/id/1032984 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39934 · Aviso do Fabricante