CVE-2015-0711 — Cisco Staros vulnerability

CWE-3994 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 35.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Staros
Timeline
PublishedApr 29
Latest updateMay 17

Description

The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and call-processing outage) via malformed PM packets, aka Bug ID CSCut94711.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDcisco/staros18.1.0.59776

🔴Vulnerability Details

2
GHSA
GHSA-27c3-mh68-3469: The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18↗2022-05-17
▶
CVEList
CVE-2015-0711: The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18↗2015-04-29
▶

📋Vendor Advisories

1
Cisco
Cisco StarOS for Cisco ASR 5000 Series HAMGR Service Proxy Mobile IPv6 Processing Denial of Service Vulnerability↗2015-04-28
▶
CVE-2015-0711 — Cisco Staros vulnerability | cvebase