Lucene search

K
ciscoCiscoCISCO-SA-20151125-ASR5000
HistoryNov 25, 2015 - 12:00 a.m.

Cisco ASR 5000 Series Telnetd Denial of Service Vulnerability

2015-11-2500:00:00
tools.cisco.com
12

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

56.0%

A vulnerability in the Telnet feature of the Cisco Aggregation Services Router (ASR) 5000 Series could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition due to an unexpected telnetd process restart.

The vulnerability is due to flaws in the Telnet implementation. An attacker could exploit this vulnerability by using Telnet to connect remotely to the device. An exploit could allow the attacker to cause the telnetd process to unexpectedly restart and cause a partial DoS condition.

Cisco has not released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151125-asr5000[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151125-asr5000”]

Affected configurations

Vulners
Node
ciscoasr_5000_series_softwareMatchany
OR
ciscoasr_9904Match5000_series_software

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

56.0%

Related for CISCO-SA-20151125-ASR5000