CVE-2015-4195 : Cisco IOS XR 5.1.1.K9SEC allows remote authenticated users to cause a denial of service (vty error, and SSH and TELNET o

Cisco IOS XR 5.1.1.K9SEC allows remote authenticated users to cause a denial of service (vty error, and SSH and TELNET outage) via a crafted disconnect action within an SSH session, aka Bug ID CSCul63127.

Published 2015-06-19 01:59:02

Updated 2016-12-28 17:45:50

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2015-4195

EPSS FAQ

0.14%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 49 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-4195

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:N/A:P	8.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

References for CVE-2015-4195

http://tools.cisco.com/security/center/viewAlert.x?alertId=39402

Cisco IOS XR SSH Disconnect Error Denial of Service Vulnerability
Vendor Advisory
http://www.securityfocus.com/bid/75295

Cisco IOS XR Software SSH Disconnect Error CVE-2015-4195 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
http://www.securitytracker.com/id/1032661

Cisco IOS XR SSH Connection Termination Flaw Lets Remote Authenticated Users Deny Service - SecurityTracker
Third Party Advisory;VDB Entry

Products affected by CVE-2015-4195

Cisco » Ios Xr » Version: 5.1.1.k9sec
cpe:2.3:o:cisco:ios_xr:5.1.1.k9sec:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2015-4195

Exploit prediction scoring system (EPSS) score for CVE-2015-4195

CVSS scores for CVE-2015-4195

CWE ids for CVE-2015-4195

References for CVE-2015-4195

Products affected by CVE-2015-4195