CVE-2015-4273

2015-07-1514:59:02

CWE-20

[email protected]

web.nvd.nist.gov

packet data network gateway

cisco asr 5000

denial of service

vulnerability

nvd

bug id

cscut38476

cve-2015-4273

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.6%

JSON

The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 15.0(912), 15.0(935), and 15.0(938) allows remote attackers to cause a denial of service (Session Manager outage) via malformed fields in an IP packet, aka Bug ID CSCut38476.

Affected configurations

NVD

Node

ciscoasr_5000_series_softwareMatch15.0\(912\)

ciscoasr_5000_series_softwareMatch15.0\(935\)

ciscoasr_5000_series_softwareMatch15.0\(938\)

CPENameOperatorVersion
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq15.0\(912\)
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq15.0\(935\)
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq15.0\(938\)

CPE	Name	Operator	Version
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	15.0\(912\)
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	15.0\(935\)
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	15.0\(938\)