CVE-2015-6297 : The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allo

The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service (process reset) via crafted packets, aka Bug ID CSCun36525.

Published 2015-09-18 22:59:04

Updated 2016-12-29 13:46:17

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2015-6297

Cisco » Ios Xr » Version: 5.2.0 Base
cpe:2.3:o:cisco:ios_xr:5.2.0_base:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2015-6297

EPSS FAQ

0.13%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 48 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-6297

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

CWE ids for CVE-2015-6297

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-6297

http://www.securitytracker.com/id/1033614

Cisco IOS for ASR 9000 Series Router Lets Remote Users Cause the Target System to Reset - SecurityTracker
Third Party Advisory;VDB Entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=41060

Cisco IOS Software DHCPv6 Server Implementation Denial of Service Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2015-6297

Products affected by CVE-2015-6297

Exploit prediction scoring system (EPSS) score for CVE-2015-6297

CVSS scores for CVE-2015-6297

CWE ids for CVE-2015-6297

References for CVE-2015-6297