Vulnerabilities > CVE-2015-6294 - Resource Management Errors vulnerability in Cisco IOS and IOS XE

CVSS 6.1 - MEDIUM

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

low complexity

cisco

CWE-399

NVD

Published: 2015-09-18

Updated: 2016-12-29

Summary

Cisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a denial of service (functionality loss) via crafted Cisco Discovery Protocol (CDP) packets, aka Bug ID CSCuu25770.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS 15.2\(2\)E Cisco IOS 15.2\(2\)E1 Cisco IOS 15.2\(2\)E2 Cisco IOS 15.2\(3\)E Cisco IOS 15.2E Cisco IOS XE 3.6E.0 Cisco IOS XE 3.6E.1 Cisco IOS XE 3.6E.2	8

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=41006
http://www.securitytracker.com/id/1033612