Lucene search

[email protected]CVE-2015-0644

HistoryMar 26, 2015 - 10:59 a.m.

CVE-2015-0644

2015-03-2610:59:09

CWE-20

[email protected]

web.nvd.nist.gov

appnav

cisco

ios xe

remote code exec

dos

vulnerability

cve-2015-0644

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.9 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.1%

JSON

AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.

Affected configurations

NVD

Node

ciscoios_xeMatch3.8s.0

ciscoios_xeMatch3.8s.1

ciscoios_xeMatch3.8s.2

ciscoios_xeMatch3.8s_base

ciscoios_xeMatch3.9s.0

ciscoios_xeMatch3.9s.1

ciscoios_xeMatch3.9s.2

ciscoios_xeMatch3.10s.0

ciscoios_xeMatch3.10s.0a

ciscoios_xeMatch3.10s.1

ciscoios_xeMatch3.10s.2

ciscoios_xeMatch3.11s.0

ciscoios_xeMatch3.11s.1

ciscoios_xeMatch3.11s.2

ciscoios_xeMatch3.12s.0

CPENameOperatorVersion
cisco:ios_xecisco ios xeeq3.8s.0
cisco:ios_xecisco ios xeeq3.8s.1
cisco:ios_xecisco ios xeeq3.8s.2
cisco:ios_xecisco ios xeeq3.8s_base
cisco:ios_xecisco ios xeeq3.9s.0
cisco:ios_xecisco ios xeeq3.9s.1
cisco:ios_xecisco ios xeeq3.9s.2
cisco:ios_xecisco ios xeeq3.10s.0
cisco:ios_xecisco ios xeeq3.10s.0a
cisco:ios_xecisco ios xeeq3.10s.1

CPE	Name	Operator	Version
cisco:ios_xe	cisco ios xe	eq	3.8s.0
cisco:ios_xe	cisco ios xe	eq	3.8s.1
cisco:ios_xe	cisco ios xe	eq	3.8s.2
cisco:ios_xe	cisco ios xe	eq	3.8s_base
cisco:ios_xe	cisco ios xe	eq	3.9s.0
cisco:ios_xe	cisco ios xe	eq	3.9s.1
cisco:ios_xe	cisco ios xe	eq	3.9s.2
cisco:ios_xe	cisco ios xe	eq	3.10s.0
cisco:ios_xe	cisco ios xe	eq	3.10s.0a
cisco:ios_xe	cisco ios xe	eq	3.10s.1