CVE-2015-0592

Cisco IOS < 15.4(2)T3 - Denial of Service via Zone-Based Firewall Kernel-Timer Handling

Title source: llm

Description

The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers incorrect kernel-timer handling, aka Bug ID CSCuh25672.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/100758

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0592

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=37416

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1031713

Scores

EPSS 0.0182

EPSS Percentile 76.5%

Details

CWE

CWE-399

Status published

Products (10)

cisco/ios 15.4\(1\)t

cisco/ios 15.4\(1\)t1

cisco/ios 15.4\(1\)t2

cisco/ios 15.4\(1\)t3

cisco/ios 15.4\(1\)t4

cisco/ios 15.4\(2\)t

cisco/ios 15.4\(2\)t1

cisco/ios 15.4\(2\)t2

cisco/ios 15.4t

cisco/ios < 15.4\(2\)t3

Published Feb 12, 2015

Tracked Since Feb 18, 2026