First published: Thu Mar 26 2015(Updated: )
Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun49658.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS | =12.2\(33\)ird1 | |
Cisco IOS | =12.2\(33\)ire3 | |
Cisco IOS | =12.2\(33\)sxi4b | |
Cisco IOS | =12.2\(44\)ex | |
Cisco IOS | =12.2\(44\)ex1 | |
Cisco IOS | =12.2\(44\)sq1 | |
Cisco IOS | =12.2\(46\)se | |
Cisco IOS | =12.2\(46\)se1 | |
Cisco IOS | =12.2\(46\)se2 | |
Cisco IOS | =12.2\(50\)se | |
Cisco IOS | =12.2\(50\)se1 | |
Cisco IOS | =12.2\(50\)se2 | |
Cisco IOS | =12.2\(50\)se3 | |
Cisco IOS | =12.2\(50\)se4 | |
Cisco IOS | =12.2\(50\)se5 | |
Cisco IOS | =12.2\(52\)se | |
Cisco IOS | =12.2\(52\)se1 | |
Cisco IOS | =12.2\(55\)se | |
Cisco IOS | =12.2\(55\)se3 | |
Cisco IOS | =12.2\(55\)se4 | |
Cisco IOS | =12.2\(55\)se5 | |
Cisco IOS | =12.2\(55\)se6 | |
Cisco IOS | =12.2\(55\)se7 | |
Cisco IOS | =12.2\(55\)se8 | |
Cisco IOS | =12.2\(55\)se9 | |
Cisco IOS | =12.2\(58\)se2 | |
Cisco IOS | =12.4\(25e\)jam1 | |
Cisco IOS | =12.4\(25e\)jap1m | |
Cisco IOS | =12.4\(25e\)jaz1 | |
Cisco IOS | =15.0\(1\)ey | |
Cisco IOS | =15.0\(1\)ey1 | |
Cisco IOS | =15.0\(1\)ey2 | |
Cisco IOS | =15.0\(2\)eb | |
Cisco IOS | =15.0\(2\)ed1 | |
Cisco IOS | =15.0\(2\)ey | |
Cisco IOS | =15.0\(2\)ey1 | |
Cisco IOS | =15.0\(2\)ey2 | |
Cisco IOS | =15.0\(2\)ey3 | |
Cisco IOS | =15.0\(2\)se | |
Cisco IOS | =15.0\(2\)se1 | |
Cisco IOS | =15.0\(2\)se2 | |
Cisco IOS | =15.0\(2\)se3 | |
Cisco IOS | =15.0\(2\)se4 | |
Cisco IOS | =15.0\(2\)se5 | |
Cisco IOS | =15.0\(2\)se6 | |
Cisco IOS | =15.0\(2\)se7 | |
Cisco IOS | =15.2\(1\)ex | |
Cisco IOS | =15.2\(1\)ey | |
Cisco IOS | =15.2\(2\)e | |
Cisco IOS | =15.2\(2\)e1 | |
Cisco IOS | =15.2\(2\)jb1 | |
Cisco IOS | =15.3\(2\)s2 | |
Cisco IOS | =15.3\(3\)ja | |
Cisco IOS | =15.3\(3\)ja1 | |
Cisco IOS | =15.3\(3\)ja1m | |
Cisco IOS | =15.3\(3\)ja1n | |
Cisco IOS | =15.3\(3\)jaa | |
Cisco IOS | =15.3\(3\)jab | |
Cisco IOS | =15.3\(3\)jab1 | |
Cisco IOS | =15.3\(3\)jn | |
Cisco IOS | =15.3\(3\)jnb |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-0648 is classified as a high severity vulnerability due to the potential for remote denial of service.
To fix CVE-2015-0648, it is recommended to upgrade Cisco IOS to a version that addresses this vulnerability.
CVE-2015-0648 affects Cisco IOS versions 12.2, 12.4, 15.0, 15.2, and 15.3 running on various Cisco networking devices.
The impact of CVE-2015-0648 includes a memory leak that can lead to exhaustion of system resources and denial of service.
Yes, CVE-2015-0648 can be exploited remotely through crafted Common Industrial Protocol (CIP) TCP packets.