7.8
CVSSv2

CVE-2015-0649

Published: 26/03/2015 Updated: 27/03/2015
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote malicious users to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun63514.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios 12.2\\(52\\)se

cisco ios 12.2\\(44\\)sq1

cisco ios 12.2\\(55\\)se5

cisco ios 15.0\\(2\\)se1

cisco ios 15.0\\(1\\)ey2

cisco ios 12.2\\(55\\)se8

cisco ios 15.0\\(2\\)se4

cisco ios 15.2\\(1\\)ey

cisco ios 15.0\\(2\\)se6

cisco ios 15.2\\(2\\)e1

cisco ios 12.2\\(55\\)se

cisco ios 15.0\\(1\\)ey

cisco ios 12.2\\(55\\)se3

cisco ios 15.0\\(1\\)ey1

cisco ios 15.0\\(2\\)se2

cisco ios 15.0\\(2\\)eb

cisco ios 12.2\\(55\\)se7

cisco ios 15.2\\(2\\)e

cisco ios 15.0\\(2\\)ey2

cisco ios 12.2\\(55\\)se9

cisco ios 15.2\\(1\\)ex

cisco ios 15.0\\(2\\)ed1

cisco ios 12.2\\(33\\)ire3

cisco ios 12.2\\(33\\)sxi4b

cisco ios 12.2\\(33\\)ird1

cisco ios 12.2\\(55\\)se4

cisco ios 12.4\\(25e\\)jaz1

cisco ios 15.0\\(2\\)se3

cisco ios 15.0\\(2\\)ey1

cisco ios 12.4\\(25e\\)jam1

cisco ios 15.0\\(2\\)se7

cisco ios 15.3\\(3\\)ja1n

cisco ios 12.4\\(25e\\)jap1m

cisco ios 15.3\\(3\\)jnb

cisco ios 12.2\\(52\\)se1

cisco ios 15.0\\(2\\)se

cisco ios 12.2\\(58\\)se2

cisco ios 12.2\\(55\\)se6

cisco ios 15.2\\(2\\)jb1

cisco ios 15.0\\(2\\)ey

cisco ios 15.3\\(2\\)s2

cisco ios 15.0\\(2\\)se5

cisco ios 15.0\\(2\\)ey3

cisco ios 15.3\\(3\\)jn

cisco ios 15.3\\(3\\)jab1

Vendor Advisories

The Cisco IOS Software implementation of the Common Industrial Protocol (CIP) feature contains the following vulnerabilities when processing crafted CIP packets that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition: Cisco IOS Software UDP CIP Denial of Service Vulnerability Cisco IOS Software TCP ...