HIGH
The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S allows remote attackers to cause a denial of service (device reload) via a malformed ND packet with the Cryptographically Generated Address (CGA) option, aka Bug ID CSCuo04400
Published Sep 28, 2015
7.8
HIGHCVSS 2.0
EPSS 3.22%
Description
The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S allows remote attackers to cause a denial of service (device reload) via a malformed ND packet with the Cryptographically Generated Address (CGA) option, aka Bug ID CSCuo04400.
Affected products
No data.
OR
- 12.2\(50\)sy
- 12.2\(50\)sy1
- 12.2\(50\)sy2
- 12.2\(50\)sy3
- 12.2\(50\)sy4
- 15.0\(1\)ex
- 15.0\(1\)sy
- 15.0\(1\)sy1
- 15.0\(1\)sy2
- 15.0\(1\)sy3
- 15.0\(1\)sy4
- 15.0\(1\)sy5
- 15.0\(1\)sy6
- 15.0\(1\)sy7
- 15.0\(1\)sy7a
- 15.0\(1\)sy8
- 15.0\(2\)ea2
- 15.0\(2\)ej
- 15.0\(2\)ej1
- 15.0\(2\)ez
- 15.0\(2\)se
- 15.0\(2\)se1
- 15.0\(2\)se2
- 15.0\(2\)se3
- 15.0\(2\)se4
- 15.0\(2\)se5
- 15.0\(2\)se6
- 15.0\(2\)se7
- 15.0\(2a\)ex5
- 15.1\(1\)sy
- 15.1\(1\)sy1
- 15.1\(1\)sy2
- 15.1\(1\)sy3
- 15.1\(1\)sy4
- 15.1\(1\)sy5
- 15.1\(2\)sg
- 15.1\(2\)sg1
- 15.1\(2\)sg2
- 15.1\(2\)sg3
- 15.1\(2\)sg4
- 15.1\(2\)sg5
- 15.1\(2\)sy
- 15.1\(2\)sy1
- 15.1\(2\)sy2
- 15.1\(2\)sy3
- 15.1\(2\)sy4
- 15.1\(2\)sy4a
- 15.2\(1\)e
- 15.2\(1\)e1
- 15.2\(1\)e2
- 15.2\(1\)e3
- 15.2\(1\)sy
- 15.2\(1\)sy0a
- 15.2\(2\)e
- 15.2\(2\)e1
- 15.2\(2\)e2
- 15.2\(2\)ea1
- 15.2\(2a\)e1
- 15.2\(3\)e
- 15.2\(3a\)e
- 15.2\(4\)s
- 15.2\(4\)s1
- 15.2\(4\)s2
- 15.2\(4\)s3
- 15.2\(4\)s3a
- 15.2\(4\)s4
- 15.2\(4\)s4a
- 15.2\(4\)s5
- 15.2\(4\)s6
- 15.2\(4\)s7
- 15.3\(1\)s
- 15.3\(1\)s2
- 15.3\(2\)s
- 15.3\(2\)s0a
- 15.3\(2\)s1
- 15.3\(2\)s2
- 15.3\(3\)s
- 15.3\(3\)s1
- 15.3\(3\)s2
- 15.3\(3\)s3
- 15.3\(3\)s4
- 15.4\(1\)s
- 15.4\(1\)s1
- 15.4\(1\)s2
- 15.4\(1\)s3
- 15.4\(2\)s
- 15.4\(2\)s1
- 15.4\(2\)s2
- 15.4\(2\)s3
- 15.4\(3\)s
- 15.4\(3\)s1
- 15.4\(3\)s2
- 3.2se.0
- 3.2se.1
- 3.2se.2
- 3.2se.3
- 3.3se.0
- 3.3se.1
- 3.3se.2
- 3.3se.3
- 3.3se.4
- 3.3se.5
- 3.3xo.0
- 3.3xo.1
- 3.3xo.2
- 3.4sg.0
- 3.4sg.1
- 3.4sg.2
- 3.4sg.3
- 3.4sg.4
- 3.4sg.5
- 3.4sg.6
- 3.5e.0
- 3.5e.1
- 3.5e.2
- 3.5e.3
- 3.6e.0
- 3.6e.0a
- 3.6e.0b
- 3.6e.1
- 3.6e.2
- 3.6e.2a
- 3.7e.0
- 3.7e.1
- 3.7e.2
- 3.10s.0
- 3.10s.0a
- 3.10s.01
- 3.10s.1
- 3.10s.2
- 3.10s.3
- 3.10s.4
- 3.11s.0
- 3.11s.1
- 3.11s.2
- 3.11s.3
- 3.12s.0
- 3.12s.1
- 3.12s.2
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs vendor-advisoryx_refsource_CISCOVendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs/cvrf/cisco-sa-20150923-fhs_cvrf.xml x_refsource_CONFIRMVendor Advisory
- http://www.securitytracker.com/id/1033647 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-6221 Advisory
| Link | Providers | Tags |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs | vendor-advisoryx_refsource_CISCOVendor Advisory | |
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs/cvrf/cisco-sa-20150923-fhs_cvrf.xml | x_refsource_CONFIRMVendor Advisory | |
| http://www.securitytracker.com/id/1033647 | vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-6221 | Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner cisco
Published Sep 28, 2015
Updated Aug 6, 2024
Reserved Aug 17, 2015
Link CVE-2015-6279
CISA Vulnrichment
No data
Red Hat
No data
GitHub
No data