Cisco ASR 9000 Series Aggregation Services Routers tmp Files Denial of Service (CVE-2015-4277)

The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service tmp/config file creation, memory consumption, and device hang via unspecified vectors,...

CVE-2015-4277

CVE-2015-4277 affects Cisco ASR 9000 Series Aggregation Services Routers running software 5.1.3 and 5.3.0. The issue stems from abrupt closing of vty sessions after a commit/end in global configuration mode, which allows a local, authenticated attacker to cause a denial of service by creating exc...