CVE-2015-6294 — Cisco IOS vulnerability

CWE-3994 documents4 sources
Severity
6.1MEDIUMNVD
EPSS
0.3%
top 50.37%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IOSCisco IOS XE
Timeline
PublishedSep 18
Latest updateMay 17

Description

Cisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a denial of service (functionality loss) via crafted Cisco Discovery Protocol (CDP) packets, aka Bug ID CSCuu25770.

CVSS vector

AV:A/AC:L/C:N/I:N/A:CExploitability: 6.5 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/ios5 versions+4
▶NVDcisco/ios_xe3.6e.0, 3.6e.1, 3.6e.2+2

🔴Vulnerability Details

2
GHSA
GHSA-m8c9-qwx9-gjr5: Cisco IOS 15↗2022-05-17
▶
CVEList
CVE-2015-6294: Cisco IOS 15↗2015-09-18
▶

📋Vendor Advisories

1
Cisco
Cisco IOS XE Cisco Discovery Protocol Packet Processing Denial of Service Vulnerability↗2015-09-17
▶
CVE-2015-6294 — Cisco IOS vulnerability | cvebase