CVE-2015-0642
HighSummary
Cisco IOS versions 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4, as well as IOS XE versions 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S are vulnerable to an attack that can cause a device reload by sending malformed IKEv2 packets. This vulnerability can be exploited over both IPv4 and IPv6 networks.
Risk Assessment
This vulnerability may lead to a remote denial of service, disrupting network operations and service availability. Organizations should be aware of the risks associated with potential downtime.
Recommendation
It is recommended to update devices to the latest software versions that address this vulnerability. Regular monitoring and auditing of network device configurations can also help mitigate risks.
Other vulnerabilities in Cisco IOS and IOS XE
See all- CVE-2016-6384High
Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.6, as well as IOS XE versions 3.1 through 3.17 and 16.2, are vulnerable to an attack that can lead to denial of service via crafted fields in an H.323 message.
- CVE-2016-6382High
Cisco IOS versions 15.2 through 15.6 and IOS XE versions 3.6 through 3.17 and 16.1 are vulnerable to an attack that can cause a remote denial of service by a malformed IPv6 PIM register packet.
- CVE-2016-6381High
A vulnerability in Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allows remote attackers to cause a denial of service via fragmented IKEv1 packets, leading to memory consumption or device reload.
- CVE-2015-0643High
Cisco IOS versions 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4, as well as IOS XE versions 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S are vulnerable to denial of service attacks by sending malformed IKEv2 packets. Attackers can exploit this vulnerability to cause memory consumption and device reload.
- CVE-2015-0637High
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS versions 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) via spoofed AN messages.
Original NVD description (English source)
Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum36951.