CVE-2015-0688

Cisco IOS XE 3.10.2S - Denial of Service via Malformed H.323 Packets

Title source: llm
STIX 2.1

Description

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module crash) via malformed H.323 packets, aka Bug ID CSCup21070.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032023
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38210

Scores

EPSS 0.0167
EPSS Percentile 74.3%

Details

CWE
CWE-399
Status published
Products (1)
cisco/ios_xe 13.10.2s
Published Apr 04, 2015
Tracked Since Feb 18, 2026