CVE-2015-0635

High

Published: 26/03/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS versions 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority (ANRA) responses. This can lead to bypassing intended device and node access restrictions or cause a denial of service.

Risk Assessment

Organizations may be exposed to unauthorized access to their devices and disruptions in domain access, potentially leading to serious operational issues.

Recommendation

It is recommended to update systems to the latest version to mitigate this vulnerability and implement additional security measures to monitor and restrict access to devices.

Other vulnerabilities in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, 15.4 oraz IOS XE 3.10.xS do 3.13.xS przed 3.13.1S

CVE-2015-0636High
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS has a vulnerability that allows remote attackers to cause a denial of service via spoofed AN messages that reset a finite state machine. This affects IOS versions 12.2, 12.4, 15.0, 15.2, 15.3, 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S.

Original NVD description (English source)

The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority (ANRA) responses, and consequently bypass intended device and node access restrictions or cause a denial of service (disrupted domain access), via crafted AN messages, aka Bug ID CSCup62191.