CVE-2015-0681
First published: Fri Jul 24 2015(Updated: )
The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO before 3.3.0XO; 3.2.xSQ; 3.3.xSQ; and 3.4.xSQ allows remote attackers to cause a denial of service (device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSCts66733.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS | =12.2\(33\)xn1 | |
| Cisco IOS | =12.2\(44\)sq1 | |
| Cisco IOS | =12.4\(23\)jy | |
| Cisco IOS | =12.4\(25e\)jam1 | |
| Cisco IOS | =12.4\(25e\)jao5m | |
| Cisco IOS | =15.0\(2\)ed1 | |
| Cisco IOS | =15.0\(2\)ey3 | |
| Cisco IOS | =15.1\(3\)svf4a | |
| Cisco IOS | =15.2\(2\)jb1 | |
| Cisco IOS XE Web UI | =2.5.0 | |
| Cisco IOS XE Web UI | =2.5.1 | |
| Cisco IOS XE Web UI | =2.5.2 | |
| Cisco IOS XE Web UI | =2.6.0 | |
| Cisco IOS XE Web UI | =2.6.1 | |
| Cisco IOS XE Web UI | =2.6.2 | |
| Cisco IOS XE Web UI | =3.1s.0 | |
| Cisco IOS XE Web UI | =3.1s.1 | |
| Cisco IOS XE Web UI | =3.1s.2 | |
| Cisco IOS XE Web UI | =3.1s.3 | |
| Cisco IOS XE Web UI | =3.1s.4 | |
| Cisco IOS XE Web UI | =3.1s.5 | |
| Cisco IOS XE Web UI | =3.1s.6 | |
| Cisco IOS XE Web UI | =3.1sg.0 | |
| Cisco IOS XE Web UI | =3.1sg.1 | |
| Cisco IOS XE Web UI | =3.2s.0 | |
| Cisco IOS XE Web UI | =3.2s.1 | |
| Cisco IOS XE Web UI | =3.2s.2 | |
| Cisco IOS XE Web UI | =3.2s.3 | |
| Cisco IOS XE Web UI | =3.2se.0 | |
| Cisco IOS XE Web UI | =3.2se.1 | |
| Cisco IOS XE Web UI | =3.2se.2 | |
| Cisco IOS XE Web UI | =3.2se.3 | |
| Cisco IOS XE Web UI | =3.2sg.0 | |
| Cisco IOS XE Web UI | =3.2sg.1 | |
| Cisco IOS XE Web UI | =3.2sg.2 | |
| Cisco IOS XE Web UI | =3.2sg.3 | |
| Cisco IOS XE Web UI | =3.2sg.4 | |
| Cisco IOS XE Web UI | =3.2sg.5 | |
| Cisco IOS XE Web UI | =3.2sg.6 | |
| Cisco IOS XE Web UI | =3.2sg.7 | |
| Cisco IOS XE Web UI | =3.2sg.8 | |
| Cisco IOS XE Web UI | =3.2sg.9 | |
| Cisco IOS XE Web UI | =3.2xo.0 | |
| Cisco IOS XE Web UI | =3.2xo.1 | |
| Cisco IOS XE Web UI | =3.3sg.0 | |
| Cisco IOS XE Web UI | =3.3sg.1 | |
| Cisco IOS XE Web UI | =3.3sg.2 | |
| Cisco IOS XE Web UI | =3.3sq.0 | |
| Cisco IOS XE Web UI | =3.3sq.1 | |
| Cisco IOS XE Web UI | =3.4s.0 | |
| Cisco IOS XE Web UI | =3.4s.1 | |
| Cisco IOS XE Web UI | =3.4s.2 | |
| Cisco IOS XE Web UI | =3.4s.3 | |
| Cisco IOS XE Web UI | =3.4s.4 | |
| Cisco IOS XE Web UI | =3.4s.5 | |
| Cisco IOS XE Web UI | =3.4s.6 | |
| Cisco IOS XE Web UI | =3.4sq.0 | |
| Cisco IOS XE Web UI | =3.4sq.1 | |
| Cisco IOS XE Web UI | =3.5s.0 | |
| Cisco IOS XE Web UI | =3.5s.1 | |
| Cisco IOS XE Web UI | =3.5s.2 | |
| Cisco IOS XE Web UI | =3.5s_base |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-0681?
CVE-2015-0681 has a high severity rating due to its potential to allow an unauthorized attacker to execute commands on affected systems.
How do I fix CVE-2015-0681?
To fix CVE-2015-0681, upgrade affected Cisco IOS and IOS XE software to the latest versions as recommended by Cisco.
Which Cisco IOS versions are affected by CVE-2015-0681?
CVE-2015-0681 affects Cisco IOS versions 12.2(33)XN1, 12.2(44)SQ1, 12.4(23)JY, and various versions of IOS XE before 3.6.0S.
Can CVE-2015-0681 be exploited remotely?
Yes, CVE-2015-0681 can be exploited remotely by an attacker who can access the TFTP service.
What impact does CVE-2015-0681 have on affected systems?
CVE-2015-0681 can lead to unauthorized access and remote command execution, potentially compromising the security of the affected systems.
- agent/author
- agent/severity
- agent/weakness
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/references
- vendor/cisco
- canonical/cisco ios
- version/cisco ios/12.2\(33\)xn1
- version/cisco ios/12.2\(44\)sq1
- version/cisco ios/12.4\(23\)jy
- version/cisco ios/12.4\(25e\)jam1
- version/cisco ios/12.4\(25e\)jao5m
- version/cisco ios/15.0\(2\)ed1
- version/cisco ios/15.0\(2\)ey3
- version/cisco ios/15.1\(3\)svf4a
- version/cisco ios/15.2\(2\)jb1
- canonical/cisco ios xe web ui
- version/cisco ios xe web ui/2.5.0
- version/cisco ios xe web ui/2.5.1
- version/cisco ios xe web ui/2.5.2
- version/cisco ios xe web ui/2.6.0
- version/cisco ios xe web ui/2.6.1
- version/cisco ios xe web ui/2.6.2
- version/cisco ios xe web ui/3.1s.0
- version/cisco ios xe web ui/3.1s.1
- version/cisco ios xe web ui/3.1s.2
- version/cisco ios xe web ui/3.1s.3
- version/cisco ios xe web ui/3.1s.4
- version/cisco ios xe web ui/3.1s.5
- version/cisco ios xe web ui/3.1s.6
- version/cisco ios xe web ui/3.1sg.0
- version/cisco ios xe web ui/3.1sg.1
- version/cisco ios xe web ui/3.2s.0
- version/cisco ios xe web ui/3.2s.1
- version/cisco ios xe web ui/3.2s.2
- version/cisco ios xe web ui/3.2s.3
- version/cisco ios xe web ui/3.2se.0
- version/cisco ios xe web ui/3.2se.1
- version/cisco ios xe web ui/3.2se.2
- version/cisco ios xe web ui/3.2se.3
- version/cisco ios xe web ui/3.2sg.0
- version/cisco ios xe web ui/3.2sg.1
- version/cisco ios xe web ui/3.2sg.2
- version/cisco ios xe web ui/3.2sg.3
- version/cisco ios xe web ui/3.2sg.4
- version/cisco ios xe web ui/3.2sg.5
- version/cisco ios xe web ui/3.2sg.6
- version/cisco ios xe web ui/3.2sg.7
- version/cisco ios xe web ui/3.2sg.8
- version/cisco ios xe web ui/3.2sg.9
- version/cisco ios xe web ui/3.2xo.0
- version/cisco ios xe web ui/3.2xo.1
- version/cisco ios xe web ui/3.3sg.0
- version/cisco ios xe web ui/3.3sg.1
- version/cisco ios xe web ui/3.3sg.2
- version/cisco ios xe web ui/3.3sq.0
- version/cisco ios xe web ui/3.3sq.1
- version/cisco ios xe web ui/3.4s.0
- version/cisco ios xe web ui/3.4s.1
- version/cisco ios xe web ui/3.4s.2
- version/cisco ios xe web ui/3.4s.3
- version/cisco ios xe web ui/3.4s.4
- version/cisco ios xe web ui/3.4s.5
- version/cisco ios xe web ui/3.4s.6
- version/cisco ios xe web ui/3.4sq.0
- version/cisco ios xe web ui/3.4sq.1
- version/cisco ios xe web ui/3.5s.0
- version/cisco ios xe web ui/3.5s.1
- version/cisco ios xe web ui/3.5s.2
- version/cisco ios xe web ui/3.5s_base