CVE-2015-0695: High severity Cisco IOS XR vulnerability

Published Apr 17, 2015

Updated

Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface (BVI) traffic, which allows remote attackers to cause a denial of service (chip and card hangs and reloads) by triggering use of a BVI interface for IPv4 packets, aka Bug ID CSCur62957.

Affected Software

15 affected components

Cisco IOS XR=4.3.0

Cisco IOS XR=4.3.1

Cisco IOS XR=4.3.2

Cisco IOS XR=4.3.3

Cisco IOS XR=5.1.0

Cisco IOS XR=5.1.1

Cisco IOS XR=5.1.2

Cisco IOS XR=5.2.0

Cisco IOS XR=5.2.1

Cisco Asr 9001

Cisco Asr 9006

Cisco Asr 9010

Cisco Asr 9904

Cisco Asr 9912

Cisco Asr 9922

Event History

Apr 17, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0695?

CVE-2015-0695 has been classified as high severity due to its potential for remote denial of service attacks that can disrupt device operations.

How do I fix CVE-2015-0695?

To mitigate CVE-2015-0695, upgrade your Cisco IOS XR software to a version that is not affected, specifically versions above 5.3.0.

What devices are affected by CVE-2015-0695?

CVE-2015-0695 affects Cisco ASR 9000 series devices running IOS XR versions from 4.3.0 to 5.3.0.

Can CVE-2015-0695 be exploited remotely?

Yes, CVE-2015-0695 can be exploited remotely by attackers to cause a denial of service on affected devices.

What is the impact of CVE-2015-0695?

The impact of CVE-2015-0695 includes chip and card hangs, as well as device reloads, leading to service interruptions.