CVE-2015-0639
HighSummary
The Common Flow Table (CFT) feature in Cisco IOS XE versions 3.6 and 3.7 before 3.7.1S and in versions 3.8 to 3.15 before respective updates allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets with IPv4 UDP encapsulation.
Risk Assessment
Attackers can exploit this vulnerability to remotely trigger a device reload, leading to a disruption in network service availability.
Recommendation
It is recommended to update Cisco IOS XE to the latest version to mitigate this vulnerability and to monitor network traffic for potential attacks.
Other vulnerabilities in Cisco IOS XE
See all- CVE-2017-12230High
A vulnerability in the web-based user interface of Cisco IOS XE 16.2 could allow an authenticated, remote attacker to elevate their privileges on an affected device. The vulnerability is due to incorrect default permission settings for new users created using the web UI.
- CVE-2016-6378High
Cisco IOS XE versions 3.1 through 3.17 and 16.1 through 16.2 are vulnerable to an attack that can cause device reload via crafted ICMP packets requiring NAT.
- CVE-2016-6386High
Cisco IOS XE versions 3.1 through 3.17 and 16.1 on 64-bit platforms allow remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets.
- CVE-2015-6282High
Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S are vulnerable to an attack that can lead to denial of service by causing device reload. Attackers can exploit IPv4 packets that require NAT and MPLS actions.
- CVE-2015-0645High
The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via malformed IPv4 or IPv6 packets.
- CVE-2015-0644High
AppNav in Cisco IOS XE versions 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.
- CVE-2015-0641High
Cisco IOS XE versions 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S are vulnerable to a denial of service attack that can cause device reload via crafted IPv6 packets. This vulnerability is known as Bug ID CSCub68073.
Original NVD description (English source)
The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S, when MMON or NBAR is enabled, allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets with IPv4 UDP encapsulation, aka Bug ID CSCua79665.