CVE-2015-0586
published 2015-01-28CVE-2015-0586: The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Services Router (aka…
PriorityP337high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.34%
81.8th percentile
The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Services Router (aka Cisco Internet Router) devices allows remote attackers to cause a denial of service (NBAR process hang) via IPv4 packets, aka Bug ID CSCuo73682.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | <= 15.3\(100\)m | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco 2900 Series Integrated Services Router Network-Based Application Recognition Denial of Service Vulnerability
vendor_cisco·2015-01-27·CVSS 7.8
CVE-2015-0586 [HIGH] CWE-399 Cisco 2900 Series Integrated Services Router Network-Based Application Recognition Denial of Service Vulnerability
Cisco 2900 Series Integrated Services Router Network-Based Application Recognition Denial of Service Vulnerability
A vulnerability in the Network-Based Application Recognition (NBAR) protocol process of the Cisco 2900 Series Integrated Services Router could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
The vulnerability occurs when the NBAR process locks. An attacker could exploit this vulnerability by sending simple IP version 4 (IPv4) packets through the router. An exploit could allow the attacker to cause a DoS condition that would require a router restart.
Cisco has confirmed the vulnerability in a security notice and released software updates.
To exploit this vulnerability, an attacker may need to acquire additional information about the
GHSA
GHSA-7jcf-g7w4-7c7p: The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15
ghsa_unreviewed·2022-05-17
CVE-2015-0586 [HIGH] GHSA-7jcf-g7w4-7c7p: The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15
The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Services Router (aka Cisco Internet Router) devices allows remote attackers to cause a denial of service (NBAR process hang) via IPv4 packets, aka Bug ID CSCuo73682.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0586http://tools.cisco.com/security/center/viewAlert.x?alertId=37171http://www.securityfocus.com/bid/72309http://www.securitytracker.com/id/1031659https://exchange.xforce.ibmcloud.com/vulnerabilities/100660http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0586http://tools.cisco.com/security/center/viewAlert.x?alertId=37171http://www.securityfocus.com/bid/72309http://www.securitytracker.com/id/1031659https://exchange.xforce.ibmcloud.com/vulnerabilities/100660
2015-01-28
Published