CVE-2015-6270: Undefined Security Weakness

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv6 packet, aka Bug ID CSCsv98555...

PT-2015-1980

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 2.2.3 on ASR 1000 devices Description The issue is related to resource management errors in the operating system. It can be exploited by a remote attacker using a specially crafted IPv6 packet, potentially leadin...

CVE-2015-6272: Undefined Security Weakness

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064...

CVE-2015-6271: Undefined Security Weakness

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

CVE-2015-6269: Undefined Security Weakness

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted 1 IPv4 or 2 IPv6 packet, aka Bug ID CSCsw69990...

PT-2015-1981

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 2.1.0 through 2.4.3 Cisco IOS XE version 2.5.0 Description The issue is related to resource management errors in the Cisco IOS operating system. It allows remote attackers to cause a denial of service, specifically an...

PT-2015-1979

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 2.2.3 on ASR 1000 devices Description The issue is related to resource management errors in the Cisco IOS operating system. It allows remote attackers to cause a denial of service, specifically an Embedded Servic...

PT-2015-1982

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 2.1.0 through 2.2.3 Cisco IOS XE version 2.3.0 Description The issue is related to resource management errors in the Cisco IOS operating system. It can be exploited by a remote attacker using a specially crafted H.323...

CVE-2015-6273

Cisco IOS XE on ASR 1000 devices (pre-3.1.2S) is affected by a vulnerability in the automatic setup of Virtual Fragment Reassembly (VFR) handled by certain firewall and NAT components. The root cause is mishandling of VFR setup, which can be triggered by crafted IP packets, allowing a remote atta...

CVE-2015-6273: Undefined Security Weakness

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

PT-2015-1977

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 2.2.3 on ASR 1000 devices Description The issue is related to resource management errors in the Cisco IOS operating system. It allows remote attackers to cause a denial of service via a crafted L2TP packet...

PT-2015-1983

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 3.1.2S Description The issue is related to the mishandling of Virtual Fragment Reassembly VFR setup by certain firewall and NAT components, which can be exploited by remote attackers to cause a denial of service...

CVE-2015-6268: Undefined Security Weakness

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482...

CVE-2015-6267: Undefined Security Weakness

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496...

PT-2015-1978

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 2.2.3 on ASR 1000 devices Description The issue is related to resource management errors in the operating system. It can be exploited by a remote attacker using specially crafted UDP packets, potentially leading ...

Evolution in Attacks Against Cisco IOS Software Platforms

Cisco has observed increasingly complex attacks that could allow an attacker to gain administrative access to a Cisco IOS device by installing a malicious ROMMON image. Successful exploitation using this image could allow an attacker to manipulate device behavior after the device is rebooted...

Cisco IOS XE Software for 1000 Series Aggregation Services Routers Fragmented Packet DoS

The version of Cisco IOS XE software running on the remote Cisco 1000 Series Aggregation Services Router ASR is affected by a denial of service vulnerability in the Embedded Services Processor ESP due to a flaw in handling the reassembly of fragmented IPv4 or IPv6 packets. A remote, unauthenticat...

Cisco IOS XE Denial of Service Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the packet reassembly subsystem of Cisco IOS XE 3.13S and earlier versions, which originates from a program that sends an ATTN-3-SYNCTIMEOUT error messag...

Code injection

Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted series of fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCtd72617...

CVE-2015-4291: Undefined Security Weakness

Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted series of fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCtd72617...