First published: Thu Mar 26 2015(Updated: )
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) via spoofed AN messages, aka Bug ID CSCup62315.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS XE Web UI | =3.10s.0 | |
Cisco IOS XE Web UI | =3.10s.1 | |
Cisco IOS XE Web UI | =3.10s.2 | |
Cisco IOS XE Web UI | =3.10s.3 | |
Cisco IOS XE Web UI | =3.10s.4 | |
Cisco IOS XE Web UI | =3.11s.0 | |
Cisco IOS XE Web UI | =3.11s.1 | |
Cisco IOS XE Web UI | =3.11s.2 | |
Cisco IOS XE Web UI | =3.11s.3 | |
Cisco IOS XE Web UI | =3.12s.0 | |
Cisco IOS XE Web UI | =3.12s.1 | |
Cisco IOS XE Web UI | =3.12s.2 | |
Cisco IOS XE Web UI | =3.13s.0 | |
Cisco IOS | =12.2\(33\)ird1 | |
Cisco IOS | =12.2\(33\)ire3 | |
Cisco IOS | =12.2\(33\)sxi4b | |
Cisco IOS | =12.2\(44\)sq1 | |
Cisco IOS | =12.4\(25e\)jam1 | |
Cisco IOS | =12.4\(25e\)jap1m | |
Cisco IOS | =12.4\(25e\)jaz1 | |
Cisco IOS | =15.0\(2\)ed1 | |
Cisco IOS | =15.2\(1\)ex | |
Cisco IOS | =15.2\(2\)jb1 | |
Cisco IOS | =15.3\(2\)s2 | |
Cisco IOS | =15.3\(3\)ja1n | |
Cisco IOS | =15.3\(3\)jab1 | |
Cisco IOS | =15.3\(3\)jn | |
Cisco IOS | =15.3\(3\)jnb | |
Cisco IOS | =15.3\(3\)s | |
Cisco IOS | =15.3\(3\)s1 | |
Cisco IOS | =15.3\(3\)s2 | |
Cisco IOS | =15.3\(3\)s3 | |
Cisco IOS | =15.3\(3\)s4 | |
Cisco IOS | =15.4\(1\)s | |
Cisco IOS | =15.4\(1\)s1 | |
Cisco IOS | =15.4\(1\)s2 | |
Cisco IOS | =15.4\(1\)s3 | |
Cisco IOS | =15.4\(2\)s | |
Cisco IOS | =15.4\(2\)s1 | |
Cisco IOS | =15.4\(2\)s2 | |
Cisco IOS | =15.4\(3\)s |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0637 has a critical severity rating due to its potential for remote denial of service.
To mitigate CVE-2015-0637, upgrade to a fixed version of the Cisco IOS or IOS XE software recommended in the advisory.
CVE-2015-0637 impacts Cisco IOS versions 12.2, 12.4, 15.0, 15.2, 15.3, 15.4, and IOS XE versions 3.10.xS through 3.13.xS prior to 3.13.1S.
CVE-2015-0637 is a remote denial of service vulnerability that allows attackers to cause a device reload.
The primary impact of CVE-2015-0637 is a denial of service that can disrupt network operations by forcing device reloads.