CVE-2015-0644
HighSummary
AppNav in Cisco IOS XE versions 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.
Risk Assessment
Attackers can remotely take control of the device or cause it to crash, potentially leading to network downtime.
Recommendation
It is recommended to update Cisco IOS XE to the latest version to mitigate this vulnerability.
Other vulnerabilities in Cisco IOS XE
See all- CVE-2017-12230High
A vulnerability in the web-based user interface of Cisco IOS XE 16.2 could allow an authenticated, remote attacker to elevate their privileges on an affected device. The vulnerability is due to incorrect default permission settings for new users created using the web UI.
- CVE-2016-6378High
Cisco IOS XE versions 3.1 through 3.17 and 16.1 through 16.2 are vulnerable to an attack that can cause device reload via crafted ICMP packets requiring NAT.
- CVE-2016-6386High
Cisco IOS XE versions 3.1 through 3.17 and 16.1 on 64-bit platforms allow remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets.
- CVE-2015-6282High
Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S are vulnerable to an attack that can lead to denial of service by causing device reload. Attackers can exploit IPv4 packets that require NAT and MPLS actions.
- CVE-2015-0645High
The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via malformed IPv4 or IPv6 packets.
- CVE-2015-0641High
Cisco IOS XE versions 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S are vulnerable to a denial of service attack that can cause device reload via crafted IPv6 packets. This vulnerability is known as Bug ID CSCub68073.
- CVE-2015-0639High
The Common Flow Table (CFT) feature in Cisco IOS XE versions 3.6 and 3.7 before 3.7.1S and in versions 3.8 to 3.15 before respective updates allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets with IPv4 UDP encapsulation.
Original NVD description (English source)
AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.