CVE-2015-0645
HighSummary
The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via malformed IPv4 or IPv6 packets.
Risk Assessment
Attackers can exploit this vulnerability to remotely reload the device, leading to service availability interruptions.
Recommendation
It is recommended to upgrade to the latest version of Cisco IOS XE to mitigate this vulnerability.
Other vulnerabilities in Cisco IOS XE
See all- CVE-2017-12230High
A vulnerability in the web-based user interface of Cisco IOS XE 16.2 could allow an authenticated, remote attacker to elevate their privileges on an affected device. The vulnerability is due to incorrect default permission settings for new users created using the web UI.
- CVE-2016-6378High
Cisco IOS XE versions 3.1 through 3.17 and 16.1 through 16.2 are vulnerable to an attack that can cause device reload via crafted ICMP packets requiring NAT.
- CVE-2016-6386High
Cisco IOS XE versions 3.1 through 3.17 and 16.1 on 64-bit platforms allow remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets.
- CVE-2015-6282High
Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S are vulnerable to an attack that can lead to denial of service by causing device reload. Attackers can exploit IPv4 packets that require NAT and MPLS actions.
- CVE-2015-0644High
AppNav in Cisco IOS XE versions 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.
- CVE-2015-0641High
Cisco IOS XE versions 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S are vulnerable to a denial of service attack that can cause device reload via crafted IPv6 packets. This vulnerability is known as Bug ID CSCub68073.
- CVE-2015-0639High
The Common Flow Table (CFT) feature in Cisco IOS XE versions 3.6 and 3.7 before 3.7.1S and in versions 3.8 to 3.15 before respective updates allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets with IPv4 UDP encapsulation.
Original NVD description (English source)
The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuq59131.