CVE-2018-15464

MEDIUM

Cisco ASR 900 Series Software - Unauthenticated Partial Denial of Service via Broadcast Packet Flood

Title source: llm
STIX 2.1

Description

A vulnerability in Cisco 900 Series Aggregation Services Router (ASR) software could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of certain broadcast packets ingress to the device. An attacker could exploit this vulnerability by sending large streams of broadcast packets to an affected device. If successful, an exploit could allow an attacker to impact services running on the device, resulting in a partial DoS condition.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106550

Scores

CVSS v3 5.8
EPSS 0.0226
EPSS Percentile 80.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-400
Status published
Products (1)
cisco/asr_900_series_software 16.6.2
Published Jan 11, 2019
Tracked Since Feb 18, 2026