CVE-2015-0635
Severity Score
9.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority (ANRA) responses, and consequently bypass intended device and node access restrictions or cause a denial of service (disrupted domain access), via crafted AN messages, aka Bug ID CSCup62191.
La implementación Autonomic Networking Infrastructure (ANI) en Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, y 15.4 y IOS XE 3.10.xS hasta 3.13.xS anterior a 3.13.1S permite a atacantes remotos falsificar respuestas de la Autonomic Networking Registration Authority (ANRA), y como consecuencia evadir las restricciones de acceso a dispositivos y nodos o causar una denegación de servicio (acceso a dominio interrumpido), a través de mensajes AN falsificados, también conocido como Bug ID CSCup62191.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-01-07 CVE Reserved
- 2015-03-26 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1031982 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ani | 2015-10-01 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.1 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.2 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.3 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.4 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.5 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.11s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.11s.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.11s.1 Search vendor "Cisco" for product "Ios Xe" and version "3.11s.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.11s.2 Search vendor "Cisco" for product "Ios Xe" and version "3.11s.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.11s.3 Search vendor "Cisco" for product "Ios Xe" and version "3.11s.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.12s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.12s.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.12s.1 Search vendor "Cisco" for product "Ios Xe" and version "3.12s.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.12s.2 Search vendor "Cisco" for product "Ios Xe" and version "3.12s.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.13s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.13s.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.2\(33\)ird1 Search vendor "Cisco" for product "Ios" and version "12.2\(33\)ird1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.2\(33\)ire3 Search vendor "Cisco" for product "Ios" and version "12.2\(33\)ire3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.2\(33\)sxi4b Search vendor "Cisco" for product "Ios" and version "12.2\(33\)sxi4b" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.2\(44\)sq1 Search vendor "Cisco" for product "Ios" and version "12.2\(44\)sq1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.4\(25e\)jam1 Search vendor "Cisco" for product "Ios" and version "12.4\(25e\)jam1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.4\(25e\)jap1m Search vendor "Cisco" for product "Ios" and version "12.4\(25e\)jap1m" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.4\(25e\)jaz1 Search vendor "Cisco" for product "Ios" and version "12.4\(25e\)jaz1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.0\(2\)ed1 Search vendor "Cisco" for product "Ios" and version "15.0\(2\)ed1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(1\)ex Search vendor "Cisco" for product "Ios" and version "15.2\(1\)ex" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(2\)jb1 Search vendor "Cisco" for product "Ios" and version "15.2\(2\)jb1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(2\)s2 Search vendor "Cisco" for product "Ios" and version "15.3\(2\)s2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)ja1n Search vendor "Cisco" for product "Ios" and version "15.3\(3\)ja1n" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)jab1 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)jab1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)jn Search vendor "Cisco" for product "Ios" and version "15.3\(3\)jn" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)jnb Search vendor "Cisco" for product "Ios" and version "15.3\(3\)jnb" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s1 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s2 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s3 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s4 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s5 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)s Search vendor "Cisco" for product "Ios" and version "15.4\(1\)s" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)s1 Search vendor "Cisco" for product "Ios" and version "15.4\(1\)s1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)s2 Search vendor "Cisco" for product "Ios" and version "15.4\(1\)s2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)s3 Search vendor "Cisco" for product "Ios" and version "15.4\(1\)s3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(2\)s Search vendor "Cisco" for product "Ios" and version "15.4\(2\)s" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(2\)s1 Search vendor "Cisco" for product "Ios" and version "15.4\(2\)s1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(2\)s2 Search vendor "Cisco" for product "Ios" and version "15.4\(2\)s2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(3\)s Search vendor "Cisco" for product "Ios" and version "15.4\(3\)s" | - |
Affected
| ||||||