CVE-2015-0771 : The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authent

The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authenticated users to cause a denial of service (device reload) by sending a crafted message during IPsec tunnel setup, aka Bug ID CSCur70505.

Published 2015-06-12 10:59:02

Updated 2017-01-04 16:03:03

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2015-0771

Probability of exploitation activity in the next 30 days: 0.11%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 43 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2015-0771

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.3	MEDIUM	AV:N/AC:M/Au:S/C:N/I:N/A:C	6.8	6.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2015-0771

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-0771

http://www.securitytracker.com/id/1032517

Cisco Catalyst 6500 Switch IPSec IKE Bug Lets Remote Authenticated Users Deny Service - SecurityTracker
Third Party Advisory;VDB Entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=39233

Cisco Catalyst 6500 Series Switches IPsec Tunnel Handling Denial of Service Vulnerability
Vendor Advisory

Products affected by CVE-2015-0771

Cisco » IOS » Version: 12.2sxj
cpe:2.3:o:cisco:ios:12.2sxj:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Catalyst 6503-e » Version: N/A
When used together with: Cisco » Catalyst 6504-e » Version: N/A
When used together with: Cisco » Catalyst 6506-e » Version: N/A
When used together with: Cisco » Catalyst 6509-e » Version: N/A
When used together with: Cisco » Catalyst 6509-neb-a » Version: N/A
When used together with: Cisco » Catalyst 6509-v-e » Version: N/A
When used together with: Cisco » Catalyst 6513 » Version: N/A
When used together with: Cisco » Catalyst 6513-e » Version: N/A
Cisco » IOS » Version: 12.2(33)sxj8
cpe:2.3:o:cisco:ios:12.2\(33\)sxj8:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Catalyst 6503-e » Version: N/A
When used together with: Cisco » Catalyst 6504-e » Version: N/A
When used together with: Cisco » Catalyst 6506-e » Version: N/A
When used together with: Cisco » Catalyst 6509-e » Version: N/A
When used together with: Cisco » Catalyst 6509-neb-a » Version: N/A
When used together with: Cisco » Catalyst 6509-v-e » Version: N/A
When used together with: Cisco » Catalyst 6513 » Version: N/A
When used together with: Cisco » Catalyst 6513-e » Version: N/A

Vulnerability Details : CVE-2015-0771

Exploit prediction scoring system (EPSS) score for CVE-2015-0771

CVSS scores for CVE-2015-0771

CWE ids for CVE-2015-0771

References for CVE-2015-0771

Products affected by CVE-2015-0771