CVE-2015-6429

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236.

La máquina de estado IKEv1 en Cisco IOS 15.4 hasta la versión 15.6 y IOS XE 3.15 hasta la versión 3.17 permite a atacantes remotos causar una denegación de servicio (terminación de conexión IPsec) a través de un paquete IKEv1 manipulado en un dispositivo final del tunel, también conocida como Bug ID CSCuw08236.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2015-08-17 CVE Reserved
2015-12-19 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-19: Data Processing Errors

CAPEC

References (2)

URL	Tag	Source
http://www.securitytracker.com/id/1034505	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151218-ios	2016-12-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.4\(3\)s Search vendor "Cisco" for product "Ios" and version "15.4\(3\)s"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.5\(1\)s Search vendor "Cisco" for product "Ios" and version "15.5\(1\)s"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.5\(1\)t Search vendor "Cisco" for product "Ios" and version "15.5\(1\)t"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.5\(2\)s Search vendor "Cisco" for product "Ios" and version "15.5\(2\)s"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.5\(2\)t Search vendor "Cisco" for product "Ios" and version "15.5\(2\)t"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.5\(3\)m Search vendor "Cisco" for product "Ios" and version "15.5\(3\)m"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.5\(3\)m1 Search vendor "Cisco" for product "Ios" and version "15.5\(3\)m1"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.5\(3\)s Search vendor "Cisco" for product "Ios" and version "15.5\(3\)s"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.5\(3\)s1 Search vendor "Cisco" for product "Ios" and version "15.5\(3\)s1"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.6\(0.17\)t Search vendor "Cisco" for product "Ios" and version "15.6\(0.17\)t"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				15.6\(1\)t0a Search vendor "Cisco" for product "Ios" and version "15.6\(1\)t0a"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				3.15s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.15s.0"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				3.15s.1 Search vendor "Cisco" for product "Ios Xe" and version "3.15s.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				3.15s.2 Search vendor "Cisco" for product "Ios Xe" and version "3.15s.2"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				3.16s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.16s.0"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				3.16s.1 Search vendor "Cisco" for product "Ios Xe" and version "3.16s.1"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				3.17s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.17s.0"		-		Affected
Cisco Search vendor "Cisco"		Ios Xe Search vendor "Cisco" for product "Ios Xe"				3.17s.1 Search vendor "Cisco" for product "Ios Xe" and version "3.17s.1"		-		Affected