PT-2015-7251 · Cisco · Cisco Ios Xe

Published 2015-12-21 · Updated 2016-12-07 · CVE-2015-6431

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 16.1.1

Description The issue is caused by incorrect processing of packets with a source MAC address of 0000:0000:0000, allowing an unauthenticated, adjacent attacker to cause the device to reload by sending a frame with a source MAC address of all zeros.

Recommendations For Cisco IOS XE version 16.1.1, update to a fixed software version to address this issue. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-6431

Affected Products

Cisco Ios Xe

References · 5

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2015-1221-iosxe · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6431 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2015-1221-iosxe · Vendor Advisory
• http://securityfocus.com/bid/79654 · Note
• http://securitytracker.com/id/1034514 · Note