PT-2015-1032 · Cisco · Cisco Ios

Published 2015-03-25 · Updated 2015-03-26 · CVE-2015-0648

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 12.4, 15.0, 15.2, and 15.3

Description The issue allows remote attackers to cause a denial of service via crafted Common Industrial Protocol (CIP) TCP packets. This could result in memory consumption. Successful exploitation could allow an unauthenticated, remote attacker to cause a reload of the forwarding plane, resulting in an interruption of services on an affected device. Repeated exploitation could result in a sustained denial of service condition. Additionally, successful exploitation could allow an unauthenticated, remote attacker to cause a memory leak on an affected device.

Recommendations For Cisco IOS versions 12.2, 12.4, 15.0, 15.2, and 15.3, update to a version that includes the software updates released by Cisco to address these vulnerabilities. As a temporary workaround, consider restricting access to the CIP feature to minimize the risk of exploitation. Avoid using the CIP protocol until the issue is resolved.

Fix

DoS

RCE

Weakness Enumeration

CWE-399

CWE-20

Related Identifiers

BDU:2015-09861

CVE-2015-0648

Affected Products

Cisco Ios

References · 5

• https://bdu.fstec.ru/vul/2015-09861 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-0648 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0648 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-cip · Vendor Advisory