CVE-2015-4203
published 2015-06-23CVE-2015-4203: Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured…
PriorityP426medium5.4CVSS 2.0
AVNACHAuNCNINAC
EPSS
2.22%
80.6th percentile
Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.05.4MEDIUMAV:N/AC:H/Au:N/C:N/I:N/A:C
vendor_cisco5.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS Software UBR Devices IPv6 VPN Multiprotocol Label Switching Denial of Service Vulnerability
vendor_cisco·2015-06-22·CVSS 5.4
CVE-2015-4203 [MEDIUM] CWE-362 Cisco IOS Software UBR Devices IPv6 VPN Multiprotocol Label Switching Denial of Service Vulnerability
Cisco IOS Software UBR Devices IPv6 VPN Multiprotocol Label Switching Denial of Service Vulnerability
A vulnerability in Cisco Universal Broadband Routers performing IPv6 VPN over Multiprotocol Label Switching (MPLS; 6VPE) and configured for NetFlow could allow an unauthenticated, remote attacker to cause a crash of the Parallel Express Forwarding (PXF) process on the Performance Routing Engine (PRE) module.
The vulnerability is due to a race condition that may cause an incorrect pointer to be used during IPv6 deaggregation. An attacker would need to control a trusted MPLS neighbor that can forward a malformed 6VPE packet at a high rate to an affected device. Successful exploitation could cause the PXF process on the PXE module of a targeted device to crash, resulting in a denial of serv
GHSA
GHSA-mfgx-5384-69g8: Race condition in Cisco IOS 12
ghsa_unreviewed·2022-05-17
CVE-2015-4203 [MEDIUM] CWE-362 GHSA-mfgx-5384-69g8: Race condition in Cisco IOS 12
Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-06-23
Published