CVE-2015-6340

CWE-119 — Buffer Overflow4 documents4 sources
Severity
5.0MEDIUM
EPSS
0.5%
top 36.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco ASR 5000 Software
Timeline
PublishedOct 27
Latest updateMay 17

Description

The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote attackers to cause a denial of service (hamgr process restart) via a crafted header in a PMIPv6 packet, aka Bug ID CSCuv63280.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDcisco/asr_5000_software19.0.m0.60737

🔴Vulnerability Details

2
GHSA
GHSA-cvjx-wv6p-p287: The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19↗2022-05-17
▶
CVEList
CVE-2015-6340: The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19↗2015-10-27
▶

📋Vendor Advisories

1
Cisco
Cisco ASR 5000 CDMA PMIpv6 Denial of Service Vulnerability↗2015-10-19
▶