CVE-2015-0731
published 2015-05-16CVE-2015-0731: The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service (device reload) via malformed Q931 SETUP messages, aka Bug ID…
PriorityP422medium6.1CVSS 2.0
AVAACLAuNCNINAC
EPSS
0.63%
45.8th percentile
The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service (device reload) via malformed Q931 SETUP messages, aka Bug ID CSCut37890.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS Voice Gateway Malformed ISDN Q931 Message Denial of Service Vulnerability
vendor_cisco·2015-05-14·CVSS 6.1
CVE-2015-0731 [MEDIUM] CWE-399 Cisco IOS Voice Gateway Malformed ISDN Q931 Message Denial of Service Vulnerability
Cisco IOS Voice Gateway Malformed ISDN Q931 Message Denial of Service Vulnerability
A vulnerability in the Integrated Services Digital Network (ISDN) processing code of Cisco IOS could allow an unauthenticated, adjacent attacker to cause a reload of the affected device.
The vulnerability is due to improper processing of malformed ISDN Q931 SETUP messages. An attacker could exploit this vulnerability by sending malformed Q931 SETUP messages to be processed by a targeted device. An exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
Cisco has confirmed the vulnerability and software updates are available.
To exploit this vulnerability, an attacker must be on the same broadcast or collision domain as the targeted device. This
GHSA
GHSA-g232-rhmm-6jj5: The ISDN implementation in Cisco IOS 15
ghsa_unreviewed·2022-05-17
CVE-2015-0731 [MEDIUM] GHSA-g232-rhmm-6jj5: The ISDN implementation in Cisco IOS 15
The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service (device reload) via malformed Q931 SETUP messages, aka Bug ID CSCut37890.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-05-16
Published