PT-2015-7145 · Cisco · Cisco Asr 1000

Publicado 2015-09-02 · Atualizado 2017-09-20 · CVE-2015-6274

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco ASR 1000 devices with software version 15.5(3)S

Description The issue allows remote attackers to cause a denial of service by triggering packet fragmentation and reassembly, resulting in ESP QFP CPU consumption.

Recommendations For Cisco ASR 1000 devices with software version 15.5(3)S, consider applying configuration changes to prevent packet fragmentation and reassembly, or temporarily restrict access to the device to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2015-6274

Produtos afetados

Cisco Asr 1000

Referências · 3

• http://tools.cisco.com/security/center/viewAlert.x?alertId=40708 · Aviso do Fabricante
• http://securitytracker.com/id/1033437 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6274 · Nota de Segurança