CVE-2015-0618: High severity Cisco IOS XR vulnerability
Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X (CRS-X) devices allows remote attackers to cause a denial of service (line-card reload) via malformed IPv6 packets with extension headers, aka Bug ID CSCuq95241.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0618?
CVE-2015-0618 has a high severity rating due to its potential to cause denial of service on affected Cisco devices.
How do I fix CVE-2015-0618?
To mitigate CVE-2015-0618, upgrade Cisco IOS XR to versions 5.1.5 or later, or apply the relevant patches provided by Cisco.
Which Cisco products are affected by CVE-2015-0618?
CVE-2015-0618 affects Cisco IOS XR versions 5.0.1, 5.2.1, 5.1.3, and 5.1.4 on specific Cisco devices including NCS 6000 and CRS-X.
Can CVE-2015-0618 be exploited remotely?
Yes, CVE-2015-0618 can be exploited remotely by sending malformed IPv6 packets with extension headers.
What consequences might arise from CVE-2015-0618 exploitation?
Exploitation of CVE-2015-0618 can lead to line-card reloads, resulting in service disruptions on the affected Cisco devices.