CVE-2015-0636

High

Published: 26/03/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS has a vulnerability that allows remote attackers to cause a denial of service via spoofed AN messages that reset a finite state machine. This affects IOS versions 12.2, 12.4, 15.0, 15.2, 15.3, 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S.

Risk Assessment

Attackers can disrupt domain access, potentially leading to serious availability issues for services within the organization.

Recommendation

It is recommended to update the system to the latest version to mitigate this vulnerability and to monitor network traffic for potential attacks.

Other vulnerabilities in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, 15.4 oraz IOS XE 3.10.xS do 3.13.xS przed 3.13.1S

CVE-2015-0635High
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS versions 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority (ANRA) responses. This can lead to bypassing intended device and node access restrictions or cause a denial of service.

Original NVD description (English source)

The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (disrupted domain access) via spoofed AN messages that reset a finite state machine, aka Bug ID CSCup62293.