CVE-2015-0649
HighSummary
Cisco IOS versions 12.2, 12.4, 15.0, 15.2, and 15.3 allow remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) TCP packets.
Risk Assessment
Attackers can remotely restart the device, leading to service availability interruptions and potential disruptions in network operations.
Recommendation
It is recommended to update the IOS to the latest version to mitigate this vulnerability and to monitor network traffic for unusual CIP packets.
Other vulnerabilities in Cisco IOS
See all- CVE-2016-1478High
Cisco IOS versions 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 improperly dequeue invalid NTP packets, allowing remote attackers to cause a denial of service (interface wedge) by sending many crafted NTP packets.
- CVE-2015-0647High
Cisco IOS versions 12.2, 12.4, 15.0, 15.2, and 15.3 allow remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) UDP packets.
- CVE-2015-0638High
In Cisco IOS versions 12.2, 12.4, 15.0, 15.2, and 15.3, configuring a VRF interface allows remote attackers to cause a denial of service (interface queue wedge) via crafted ICMPv4 packets.
- CVE-2008-4128MediumActively exploited
Multiple CSRF vulnerabilities in the HTTP Administration component of Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands. The attack involves requests to the /level/15/exec/- URI with the "show privilege" command and to the /level/15/exec/-/configure/http URI with the "alias exec" command.
- CVE-1999-0063Medium
Cisco IOS 12.0 and other versions can be crashed by malicious UDP packets to the syslog port.
- CVE-1999-0445Medium
In some versions of IOS 12.0 on Cisco routers running NAT, some packets may not be filtered by input access list filters.
- CVE-1999-0162Medium
The 'established' keyword in some Cisco IOS software allowed an attacker to bypass filtering.
- CVE-1999-0159Low
Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases.
- CVE-1999-0160High
Some classic Cisco IOS devices have a vulnerability in PPP CHAP authentication, allowing unauthorized PPP connections to be established.
- CVE-1999-0161High
In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
Original NVD description (English source)
Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun63514.