Lucene search

K
cve[email protected]CVE-2015-6279
HistorySep 28, 2015 - 2:59 a.m.

CVE-2015-6279

2015-09-2802:59:11
CWE-20
web.nvd.nist.gov
20
cisco
ios
ios xe
ipv6
snooping
first-hop security
cve-2015-6279
nvd
denial of service
cga

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S allows remote attackers to cause a denial of service (device reload) via a malformed ND packet with the Cryptographically Generated Address (CGA) option, aka Bug ID CSCuo04400.

Affected configurations

NVD
Node
ciscoiosMatch12.2\(50\)sy
OR
ciscoiosMatch12.2\(50\)sy1
OR
ciscoiosMatch12.2\(50\)sy2
OR
ciscoiosMatch12.2\(50\)sy3
OR
ciscoiosMatch12.2\(50\)sy4
OR
ciscoiosMatch15.0\(1\)ex
OR
ciscoiosMatch15.0\(1\)sy
OR
ciscoiosMatch15.0\(1\)sy1
OR
ciscoiosMatch15.0\(1\)sy2
OR
ciscoiosMatch15.0\(1\)sy3
OR
ciscoiosMatch15.0\(1\)sy4
OR
ciscoiosMatch15.0\(1\)sy5
OR
ciscoiosMatch15.0\(1\)sy6
OR
ciscoiosMatch15.0\(1\)sy7
OR
ciscoiosMatch15.0\(1\)sy7a
OR
ciscoiosMatch15.0\(1\)sy8
OR
ciscoiosMatch15.0\(2\)ea2
OR
ciscoiosMatch15.0\(2\)ej
OR
ciscoiosMatch15.0\(2\)ej1
OR
ciscoiosMatch15.0\(2\)ez
OR
ciscoiosMatch15.0\(2\)se
OR
ciscoiosMatch15.0\(2\)se1
OR
ciscoiosMatch15.0\(2\)se2
OR
ciscoiosMatch15.0\(2\)se3
OR
ciscoiosMatch15.0\(2\)se4
OR
ciscoiosMatch15.0\(2\)se5
OR
ciscoiosMatch15.0\(2\)se6
OR
ciscoiosMatch15.0\(2\)se7
OR
ciscoiosMatch15.0\(2a\)ex5
OR
ciscoiosMatch15.1\(1\)sy
OR
ciscoiosMatch15.1\(1\)sy1
OR
ciscoiosMatch15.1\(1\)sy2
OR
ciscoiosMatch15.1\(1\)sy3
OR
ciscoiosMatch15.1\(1\)sy4
OR
ciscoiosMatch15.1\(1\)sy5
OR
ciscoiosMatch15.1\(2\)sg
OR
ciscoiosMatch15.1\(2\)sg1
OR
ciscoiosMatch15.1\(2\)sg2
OR
ciscoiosMatch15.1\(2\)sg3
OR
ciscoiosMatch15.1\(2\)sg4
OR
ciscoiosMatch15.1\(2\)sg5
OR
ciscoiosMatch15.1\(2\)sy
OR
ciscoiosMatch15.1\(2\)sy1
OR
ciscoiosMatch15.1\(2\)sy2
OR
ciscoiosMatch15.1\(2\)sy3
OR
ciscoiosMatch15.1\(2\)sy4
OR
ciscoiosMatch15.1\(2\)sy4a
OR
ciscoiosMatch15.2\(1\)e
OR
ciscoiosMatch15.2\(1\)e1
OR
ciscoiosMatch15.2\(1\)e2
OR
ciscoiosMatch15.2\(1\)e3
OR
ciscoiosMatch15.2\(1\)sy
OR
ciscoiosMatch15.2\(1\)sy0a
OR
ciscoiosMatch15.2\(2\)e
OR
ciscoiosMatch15.2\(2\)e1
OR
ciscoiosMatch15.2\(2\)e2
OR
ciscoiosMatch15.2\(2\)ea1
OR
ciscoiosMatch15.2\(2a\)e1
OR
ciscoiosMatch15.2\(3\)e
OR
ciscoiosMatch15.2\(3a\)e
OR
ciscoiosMatch15.2\(4\)s
OR
ciscoiosMatch15.2\(4\)s1
OR
ciscoiosMatch15.2\(4\)s2
OR
ciscoiosMatch15.2\(4\)s3
OR
ciscoiosMatch15.2\(4\)s3a
OR
ciscoiosMatch15.2\(4\)s4
OR
ciscoiosMatch15.2\(4\)s4a
OR
ciscoiosMatch15.2\(4\)s5
OR
ciscoiosMatch15.2\(4\)s6
OR
ciscoiosMatch15.2\(4\)s7
OR
ciscoiosMatch15.3\(1\)s
OR
ciscoiosMatch15.3\(1\)s2
OR
ciscoiosMatch15.3\(2\)s
OR
ciscoiosMatch15.3\(2\)s0a
OR
ciscoiosMatch15.3\(2\)s1
OR
ciscoiosMatch15.3\(2\)s2
OR
ciscoiosMatch15.3\(3\)s
OR
ciscoiosMatch15.3\(3\)s1
OR
ciscoiosMatch15.3\(3\)s2
OR
ciscoiosMatch15.3\(3\)s3
OR
ciscoiosMatch15.3\(3\)s4
OR
ciscoiosMatch15.4\(1\)s
OR
ciscoiosMatch15.4\(1\)s1
OR
ciscoiosMatch15.4\(1\)s2
OR
ciscoiosMatch15.4\(1\)s3
OR
ciscoiosMatch15.4\(2\)s
OR
ciscoiosMatch15.4\(2\)s1
OR
ciscoiosMatch15.4\(2\)s2
OR
ciscoiosMatch15.4\(2\)s3
OR
ciscoiosMatch15.4\(3\)s
OR
ciscoiosMatch15.4\(3\)s1
OR
ciscoiosMatch15.4\(3\)s2
OR
ciscoios_xeMatch3.2se.0
OR
ciscoios_xeMatch3.2se.1
OR
ciscoios_xeMatch3.2se.2
OR
ciscoios_xeMatch3.2se.3
OR
ciscoios_xeMatch3.3se.0
OR
ciscoios_xeMatch3.3se.1
OR
ciscoios_xeMatch3.3se.2
OR
ciscoios_xeMatch3.3se.3
OR
ciscoios_xeMatch3.3se.4
OR
ciscoios_xeMatch3.3se.5
OR
ciscoios_xeMatch3.3xo.0
OR
ciscoios_xeMatch3.3xo.1
OR
ciscoios_xeMatch3.3xo.2
OR
ciscoios_xeMatch3.4sg.0
OR
ciscoios_xeMatch3.4sg.1
OR
ciscoios_xeMatch3.4sg.2
OR
ciscoios_xeMatch3.4sg.3
OR
ciscoios_xeMatch3.4sg.4
OR
ciscoios_xeMatch3.4sg.5
OR
ciscoios_xeMatch3.4sg.6
OR
ciscoios_xeMatch3.5e.0
OR
ciscoios_xeMatch3.5e.1
OR
ciscoios_xeMatch3.5e.2
OR
ciscoios_xeMatch3.5e.3
OR
ciscoios_xeMatch3.6e.0
OR
ciscoios_xeMatch3.6e.0a
OR
ciscoios_xeMatch3.6e.0b
OR
ciscoios_xeMatch3.6e.1
OR
ciscoios_xeMatch3.6e.2
OR
ciscoios_xeMatch3.6e.2a
OR
ciscoios_xeMatch3.7e.0
OR
ciscoios_xeMatch3.7e.1
OR
ciscoios_xeMatch3.7e.2
OR
ciscoios_xeMatch3.10s.0
OR
ciscoios_xeMatch3.10s.0a
OR
ciscoios_xeMatch3.10s.01
OR
ciscoios_xeMatch3.10s.1
OR
ciscoios_xeMatch3.10s.2
OR
ciscoios_xeMatch3.10s.3
OR
ciscoios_xeMatch3.10s.4
OR
ciscoios_xeMatch3.11s.0
OR
ciscoios_xeMatch3.11s.1
OR
ciscoios_xeMatch3.11s.2
OR
ciscoios_xeMatch3.11s.3
OR
ciscoios_xeMatch3.12s.0
OR
ciscoios_xeMatch3.12s.1
OR
ciscoios_xeMatch3.12s.2

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.6 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.2%