Lucene search
HistoryMar 26, 2015 - 10:59 a.m.
CVE-2015-0644
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
7.7
Confidence
High
EPSS
0.005
Percentile
76.0%
AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.
Affected configurations
Node
ciscoios_xeMatch3.8s.0
ORciscoios_xeMatch3.8s.1
ORciscoios_xeMatch3.8s.2
ORciscoios_xeMatch3.8s_base
ORciscoios_xeMatch3.9s.0
ORciscoios_xeMatch3.9s.1
ORciscoios_xeMatch3.9s.2
ORciscoios_xeMatch3.10s.0
ORciscoios_xeMatch3.10s.0a
ORciscoios_xeMatch3.10s.1
ORciscoios_xeMatch3.10s.2
ORciscoios_xeMatch3.11s.0
ORciscoios_xeMatch3.11s.1
ORciscoios_xeMatch3.11s.2
ORciscoios_xeMatch3.12s.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios_xe | 3.8s.0 | cpe:2.3:o:cisco:ios_xe:3.8s.0:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.8s.1 | cpe:2.3:o:cisco:ios_xe:3.8s.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.8s.2 | cpe:2.3:o:cisco:ios_xe:3.8s.2:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.8s_base | cpe:2.3:o:cisco:ios_xe:3.8s_base:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.9s.0 | cpe:2.3:o:cisco:ios_xe:3.9s.0:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.9s.1 | cpe:2.3:o:cisco:ios_xe:3.9s.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.9s.2 | cpe:2.3:o:cisco:ios_xe:3.9s.2:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.10s.0 | cpe:2.3:o:cisco:ios_xe:3.10s.0:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.10s.0a | cpe:2.3:o:cisco:ios_xe:3.10s.0a:*:*:*:*:*:*:* |
| cisco | ios_xe | 3.10s.1 | cpe:2.3:o:cisco:ios_xe:3.10s.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-0644
2015-03-26 10:00:00
prion
prion
Code injection
2015-03-26 10:59:00
nessus
nessus
Cisco IOS XE AppNav Component RCE
2015-04-06 00:00:00
cve
cve
CVE-2015-0644
2015-03-26 10:59:09
cisco
cisco
securityvulns
securityvulns
Cisco IOS multiple security vulnerabilities
2015-04-16 00:00:00
kaspersky
kaspersky
KLA10510 Multiple vulnerabilities in Cisco IOS
2015-03-26 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
7.7
Confidence
High
EPSS
0.005
Percentile
76.0%
Related for NVD:CVE-2015-0644