CVE-2015-0710
6.1 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
6.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.3%
The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device reload) via a series of packets that are considered oversized and trigger improper fragmentation handling, aka Bug IDs CSCup37676 and CSCup30335.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:ios_xe | cisco ios xe | eq | 3.10.0s |
| cisco:ios_xe | cisco ios xe | eq | 3.10s.01 |
Related
6.1 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
6.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.3%