7.8
CVSSv2

CVE-2015-0645

Published: 26/03/2015 Updated: 04/09/2015
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x prior to 3.10.4S, 3.11 prior to 3.11.3S, 3.12 prior to 3.12.2S, 3.13 prior to 3.13.1S, 3.14 prior to 3.14.0S, and 3.15 prior to 3.15.0S allows remote malicious users to cause a denial of service (device reload) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuq59131.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios xe 3.1s.2

cisco ios xe 3.1s.3

cisco ios xe 3.2s.1

cisco ios xe 3.2s.2

cisco ios xe 3.6s.2

cisco ios xe 3.4s.5

cisco ios xe 3.4s.6

cisco ios xe 3.10s.0

cisco ios xe 3.2s.3

cisco ios xe 3.1s.0

cisco ios xe 3.4s.2

cisco ios xe 3.4s.3

cisco ios xe 3.4s.4

cisco ios xe 3.5s.0

cisco ios xe 3.12s.0

cisco ios xe 3.11s.2

cisco ios xe 3.13s.0

cisco ios xe 3.10s.3

cisco ios xe 3.3s.0

cisco ios xe 3.1s.1

cisco ios xe 3.3s.1

cisco ios xe 3.4s.1

cisco ios xe 3.6s_base

cisco ios xe 3.5s.1

cisco ios xe 3.6s.0

cisco ios xe 3.10s.2

cisco ios xe 3.11s.1

cisco ios xe 3.11s.0

cisco ios xe 3.1s.4

cisco ios xe 3.1s.6

cisco ios xe 3.2s.0

cisco ios xe 3.4s.0

cisco ios xe 3.3s.2

cisco ios xe 3.5s_base

cisco ios xe 3.5s.2

cisco ios xe 3.6s.1

cisco ios xe 3.10s.1

cisco ios xe 3.10s.0a

cisco ios xe 3.12s.1

cisco ios xe 3.1s.5

Vendor Advisories

Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers (ASR), Cisco 4400 Series Integrated Services Routers (ISR), and Cisco Cloud Services Routers (CSR) 1000v Series contains the following vulnerabilities: Cisco IOS XE Software Fragmented Packet Denial of Service Vulnerability Cisco IOS XE Software Crafted TCP Packet ...