CVE-2015-6282

Cisco IOS XE < 3.10.6S/3.13.3S/3.15.1S DoS via NAT/MPLS Packet Handling

Title source: llm

Description

Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service (device reload) via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-iosxe

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1033645

Scores

EPSS 0.0219

EPSS Percentile 80.3%

Details

CWE

CWE-20 CWE-399

Status published

Products (50)

cisco/ios_xe 2.1.0

cisco/ios_xe 2.1.1

cisco/ios_xe 2.1.2

cisco/ios_xe 2.1.3

cisco/ios_xe 2.2.1

cisco/ios_xe 2.2.2

cisco/ios_xe 2.2.3

cisco/ios_xe 2.3.0

cisco/ios_xe 2.3.0t

cisco/ios_xe 2.3.1t

... and 40 more

Published Sep 26, 2015

Tracked Since Feb 18, 2026