CVE-2015-4277

Cisco NX-OS - Denial of Service via Global-Configuration Commit Operation

Title source: llm

Description

The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service (tmp/*config file creation, memory consumption, and device hang) via unspecified vectors, aka Bug ID CSCut93842.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/viewAlert.x?alertId=39939

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1033259

Scores

EPSS 0.0034

EPSS Percentile 26.0%

Details

CWE

CWE-399

Status published

Products (2)

cisco/nx-os 5.1.3

cisco/nx-os 5.3.0

Published Aug 19, 2015

Tracked Since Feb 18, 2026