CVE-2015-4203
Severity Score
5.4
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.
Condición de carrera en Cisco IOS 12.2SCH en el módulo Performance Routing Engine (PRE) en los dispositivos uBR10000, cuando NetFlow y una VPN MPLS IPv6 están configurados, permite a atacantes remotos causar una denegación de servicio (caída del proceso PXF) mediante el envío rápido de paquetes MPLS 6VPE malformados, también conocida como Bug ID CSCud83396.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-06-04 CVE Reserved
- 2015-06-23 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/75339 | Third Party Advisory | |
| http://www.securitytracker.com/id/1032692 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/viewAlert.x?alertId=39439 | 2016-12-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.2\(33\)sch Search vendor "Cisco" for product "Ios" and version "12.2\(33\)sch" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ubr10000 Cable Modem Termination System Search vendor "Cisco" for product "Ubr10000 Cable Modem Termination System" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.2sch Search vendor "Cisco" for product "Ios" and version "12.2sch" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ubr10000 Cable Modem Termination System Search vendor "Cisco" for product "Ubr10000 Cable Modem Termination System" | - | - |
Safe
|