PT-2015-6452 · Cisco · Cisco Ios Xr

Published 2015-06-18 · Updated 2016-12-28 · CVE-2015-4195

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.1.1.K9SEC

Description A denial of service condition can be caused by an authenticated, remote attacker via a crafted disconnect action within an SSH session. The vulnerability occurs due to an error when an SSH connection is disconnected from the affected device, causing the vty to become unreachable and resulting in further SSH or Telnet connections to fail. To exploit this issue, an attacker must first authenticate to the targeted device, which reduces the likelihood of a successful exploit.

Recommendations For Cisco IOS XR version 5.1.1.K9SEC, update to a fixed software version to resolve the issue. As a temporary workaround, consider restricting SSH connections to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-4195

Affected Products

Cisco Ios Xr

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-4195 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39402 · Vendor Advisory
• http://securityfocus.com/bid/75295 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150618-CVE-2015-4195 · Note
• http://securitytracker.com/id/1032661 · Note