CVE-2015-4243
published 2015-07-08CVE-2015-4243: The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload) by…
PriorityP424medium6.1CVSS 2.0
AVAACLAuNCNINAC
EPSS
0.77%
52.0th percentile
The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload) by sending malformed PPPoE Active Discovery Request (PADR) packets on the local network, aka Bug ID CSCty94202.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios_xe | — | — |
CVSS provenance
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS XE for Cisco 1000 Series ASR Routers Denial of Service Vulnerability
vendor_cisco·2015-07-07·CVSS 6.1
CVE-2015-4243 [MEDIUM] CWE-399 Cisco IOS XE for Cisco 1000 Series ASR Routers Denial of Service Vulnerability
Cisco IOS XE for Cisco 1000 Series ASR Routers Denial of Service Vulnerability
A vulnerability in PPP over Ethernet (PPPoE) processing on Cisco IOS XE for Cisco 1000 Series ASR routers could allow an unauthenticated, adjacent attacker to cause a reload of the affected device.
The vulnerability is due to improper processing of malformed PPPoE Active Discovery Request (PADR) packets. An attacker could exploit this vulnerability by sending PADR packets as part of PPPoE establishment. An exploit could allow the attacker to cause a reload of the affected device.
Cisco has confirmed the vulnerability and released software updates.
To exploit this vulnerability, an attacker must be on the same broadcast or collision domain as the targeted system. This access requirement reduces the likelihoo
GHSA
GHSA-xmx7-4wwc-55h4: The PPPoE establishment implementation in Cisco IOS XE 3
ghsa_unreviewed·2022-05-17
CVE-2015-4243 [MEDIUM] GHSA-xmx7-4wwc-55h4: The PPPoE establishment implementation in Cisco IOS XE 3
The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload) by sending malformed PPPoE Active Discovery Request (PADR) packets on the local network, aka Bug ID CSCty94202.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-07-08
Published