CVE-2015-6267
HighSummary
Cisco IOS XE before version 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service via a crafted L2TP packet, leading to an Embedded Services Processor crash.
Risk Assessment
Attackers can exploit this vulnerability to disrupt device operations, potentially causing downtime in the organization's network services.
Recommendation
It is recommended to upgrade Cisco IOS XE to version 2.2.3 or later to mitigate this vulnerability.
Other vulnerabilities in Cisco IOS XE na urządzeniach ASR 1000
See all- CVE-2015-6269High
Cisco IOS XE before version 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted (1) IPv4 or (2) IPv6 packet.
- CVE-2015-6273High
Cisco IOS XE before version 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly (VFR) by certain firewall and NAT components, allowing remote attackers to cause a denial of service (Embedded Services Processor crash) via crafted IP packets.
- CVE-2015-4291High
Cisco IOS XE versions 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service by sending a crafted series of fragmented IPv4 or IPv6 packets.
Original NVD description (English source)
Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496.