CVE-2015-6297 — Cisco IOS XR vulnerability

CWE-3994 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.4%
top 37.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS XR
Timeline
PublishedSep 18
Latest updateMay 17

Description

The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service (process reset) via crafted packets, aka Bug ID CSCun36525.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDcisco/ios_xr5.2.0_base

🔴Vulnerability Details

2
GHSA
GHSA-4x2j-vmv4-3qc3: The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5↗2022-05-17
▶
CVEList
CVE-2015-6297: The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5↗2015-09-18
▶

📋Vendor Advisories

1
Cisco
Cisco IOS Software DHCPv6 Server Implementation Denial of Service Vulnerability↗2015-09-18
▶
CVE-2015-6297 — Cisco IOS XR vulnerability | cvebase