CVE-2015-6273
Severity Score
7.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly (VFR) by certain firewall and NAT components, which allows remote attackers to cause a denial of service (Embedded Services Processor crash) via crafted IP packets, aka Bug IDs CSCtf87624, CSCte93229, CSCtd19103, and CSCti63623.
Vulnerabilidad en Cisco IOS XE en versiones anteriores a 3.1.2S en dispositivos ASR 1000, no se maneja correctamente la configuración automática de Virtual Fragment Reassembly (VFR) por ciertos firewall y componentes NAT, lo que permite a atacantes remotos provocar una denegación de servicio (caída de Embedded Services Processor) a través de paquetes IP manipulados, también conocida como Bug IDs CSCtf87624, CSCte93229, CSCtd19103 y CSCti63623.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-08-17 CVE Reserved
- 2015-08-29 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-399: Resource Management Errors
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1033408 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/viewAlert.x?alertId=40690 | 2017-09-20 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.1 Search vendor "Cisco" for product "Ios Xe" and version "2.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1001 Search vendor "Cisco" for product "Asr 1001" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.1 Search vendor "Cisco" for product "Ios Xe" and version "2.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1001-x Search vendor "Cisco" for product "Asr 1001-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.1 Search vendor "Cisco" for product "Ios Xe" and version "2.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1002 Search vendor "Cisco" for product "Asr 1002" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.1 Search vendor "Cisco" for product "Ios Xe" and version "2.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1002-x Search vendor "Cisco" for product "Asr 1002-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.1 Search vendor "Cisco" for product "Ios Xe" and version "2.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1004 Search vendor "Cisco" for product "Asr 1004" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.1 Search vendor "Cisco" for product "Ios Xe" and version "2.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1006 Search vendor "Cisco" for product "Asr 1006" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.1 Search vendor "Cisco" for product "Ios Xe" and version "2.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1013 Search vendor "Cisco" for product "Asr 1013" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.2 Search vendor "Cisco" for product "Ios Xe" and version "2.2.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1001 Search vendor "Cisco" for product "Asr 1001" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.2 Search vendor "Cisco" for product "Ios Xe" and version "2.2.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1001-x Search vendor "Cisco" for product "Asr 1001-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.2 Search vendor "Cisco" for product "Ios Xe" and version "2.2.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1002 Search vendor "Cisco" for product "Asr 1002" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.2 Search vendor "Cisco" for product "Ios Xe" and version "2.2.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1002-x Search vendor "Cisco" for product "Asr 1002-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.2 Search vendor "Cisco" for product "Ios Xe" and version "2.2.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1004 Search vendor "Cisco" for product "Asr 1004" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.2 Search vendor "Cisco" for product "Ios Xe" and version "2.2.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1006 Search vendor "Cisco" for product "Asr 1006" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.2 Search vendor "Cisco" for product "Ios Xe" and version "2.2.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1013 Search vendor "Cisco" for product "Asr 1013" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.3 Search vendor "Cisco" for product "Ios Xe" and version "2.2.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1001 Search vendor "Cisco" for product "Asr 1001" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.3 Search vendor "Cisco" for product "Ios Xe" and version "2.2.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1001-x Search vendor "Cisco" for product "Asr 1001-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.3 Search vendor "Cisco" for product "Ios Xe" and version "2.2.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1002 Search vendor "Cisco" for product "Asr 1002" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.3 Search vendor "Cisco" for product "Ios Xe" and version "2.2.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1002-x Search vendor "Cisco" for product "Asr 1002-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.3 Search vendor "Cisco" for product "Ios Xe" and version "2.2.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1004 Search vendor "Cisco" for product "Asr 1004" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.3 Search vendor "Cisco" for product "Ios Xe" and version "2.2.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1006 Search vendor "Cisco" for product "Asr 1006" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 2.2.3 Search vendor "Cisco" for product "Ios Xe" and version "2.2.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1013 Search vendor "Cisco" for product "Asr 1013" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.0s Search vendor "Cisco" for product "Ios Xe" and version "3.1.0s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1001 Search vendor "Cisco" for product "Asr 1001" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.0s Search vendor "Cisco" for product "Ios Xe" and version "3.1.0s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1001-x Search vendor "Cisco" for product "Asr 1001-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.0s Search vendor "Cisco" for product "Ios Xe" and version "3.1.0s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1002 Search vendor "Cisco" for product "Asr 1002" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.0s Search vendor "Cisco" for product "Ios Xe" and version "3.1.0s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1002-x Search vendor "Cisco" for product "Asr 1002-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.0s Search vendor "Cisco" for product "Ios Xe" and version "3.1.0s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1004 Search vendor "Cisco" for product "Asr 1004" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.0s Search vendor "Cisco" for product "Ios Xe" and version "3.1.0s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1006 Search vendor "Cisco" for product "Asr 1006" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.0s Search vendor "Cisco" for product "Ios Xe" and version "3.1.0s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1013 Search vendor "Cisco" for product "Asr 1013" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.1s Search vendor "Cisco" for product "Ios Xe" and version "3.1.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1001 Search vendor "Cisco" for product "Asr 1001" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.1s Search vendor "Cisco" for product "Ios Xe" and version "3.1.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1001-x Search vendor "Cisco" for product "Asr 1001-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.1s Search vendor "Cisco" for product "Ios Xe" and version "3.1.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1002 Search vendor "Cisco" for product "Asr 1002" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.1s Search vendor "Cisco" for product "Ios Xe" and version "3.1.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1002-x Search vendor "Cisco" for product "Asr 1002-x" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.1s Search vendor "Cisco" for product "Ios Xe" and version "3.1.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1004 Search vendor "Cisco" for product "Asr 1004" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.1s Search vendor "Cisco" for product "Ios Xe" and version "3.1.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1006 Search vendor "Cisco" for product "Asr 1006" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.1.1s Search vendor "Cisco" for product "Ios Xe" and version "3.1.1s" | - |
Affected
| in | Cisco Search vendor "Cisco" | Asr 1013 Search vendor "Cisco" for product "Asr 1013" | - | - |
Safe
|