PT-2015-6494 · Cisco · Cisco Asr 5000

Published 2015-07-16 · Updated 2017-09-22 · CVE-2015-4275

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 devices with software versions 18.0.0.59167 and 18.0.0.59211

Description The issue allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet.

Recommendations For version 18.0.0.59167, update to a version that fixes the issue. For version 18.0.0.59211, update to a version that fixes the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-4275

Affected Products

Cisco Asr 5000

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-4275 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39934 · Vendor Advisory
• http://securitytracker.com/id/1032984 · Note