CVE-2015-6382
published 2015-11-26CVE-2015-6382: Cisco ASR 5000 devices with software 16.0(900) allow remote attackers to cause a denial of service (telnetd process restart) via a TELNET connection, aka Bug…
PriorityP427medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.74%
75.2th percentile
Cisco ASR 5000 devices with software 16.0(900) allow remote attackers to cause a denial of service (telnetd process restart) via a TELNET connection, aka Bug ID CSCuv25815.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_telnetd | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_cisco5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco ASR 5000 Series Telnetd Denial of Service Vulnerability
vendor_cisco·2015-11-25·CVSS 5.0
CVE-2015-6382 [MEDIUM] CWE-399 Cisco ASR 5000 Series Telnetd Denial of Service Vulnerability
Cisco ASR 5000 Series Telnetd Denial of Service Vulnerability
A vulnerability in the Telnet feature of the Cisco Aggregation Services Router (ASR) 5000 Series could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition due to an unexpected telnetd process restart.
The vulnerability is due to flaws in the Telnet implementation. An attacker could exploit this vulnerability by using Telnet to connect remotely to the device. An exploit could allow the attacker to cause the telnetd process to unexpectedly restart and cause a partial DoS condition.
Cisco has not released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link: https://sec.cloudapps.ci
Cisco
Cisco ASR 5000 Series Telnetd Denial of Service Vulnerability
vendor_cisco
CVE-2015-6382 Cisco ASR 5000 Series Telnetd Denial of Service Vulnerability
CVE-2015-6382: Cisco ASR 5000 Series Telnetd Denial of Service Vulnerability
A vulnerability in the Telnet feature of the Cisco Aggregation Services Router (ASR) 5000 Series could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition due to an unexpected telnetd process restart. The vulnerability is due to flaws in the Telnet implementation. An attacker could exploit this vulnerability by using Telnet to connect remotely to the device. An exploit could allow the attacker to cause the telnetd process to unexpectedly restart and cause a partial DoS condition. Cisco has not released software updates that address this vulnerability. There are no
CWE: CWE-399, CWE-399
Bug IDs: CSCuv25815
GHSA
GHSA-78qm-cmxg-7jqr: Cisco ASR 5000 devices with software 16
ghsa_unreviewed·2022-05-17
CVE-2015-6382 [MEDIUM] GHSA-78qm-cmxg-7jqr: Cisco ASR 5000 devices with software 16
Cisco ASR 5000 devices with software 16.0(900) allow remote attackers to cause a denial of service (telnetd process restart) via a TELNET connection, aka Bug ID CSCuv25815.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-11-26
Published