CVE-2015-0685
HighSummary
Cisco IOS XE before version 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, allowing remote attackers to cause a denial of service (device hang) via crafted IP packets.
Risk Assessment
Attackers can remotely block the device, leading to a disruption in network service availability.
Recommendation
It is recommended to update Cisco IOS XE to version 3.7.5S or later to mitigate this vulnerability.
Other vulnerabilities in Cisco IOS XE on ASR 1000 devices
See all- CVE-2015-6272High
Cisco IOS XE versions 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allow remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted H.323 packet.
- CVE-2015-6271High
Cisco IOS XE versions 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when using NAT Application Layer Gateway, allow remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted SIP packet.
- CVE-2015-6270High
Cisco IOS XE before version 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv6 packet.
- CVE-2015-6268High
Cisco IOS XE before version 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv4 UDP packet.
Original NVD description (English source)
Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service (device hang) via crafted IP packets, aka Bug ID CSCub31873.