First published: Fri Jun 19 2015(Updated: )
Cisco IOS XR 5.1.1.K9SEC allows remote authenticated users to cause a denial of service (vty error, and SSH and TELNET outage) via a crafted disconnect action within an SSH session, aka Bug ID CSCul63127.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS XRv 9000 | =5.1.1.k9sec |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2015-4195 is classified as a denial of service vulnerability.
To fix CVE-2015-4195, upgrade Cisco IOS XR to a version that addresses this vulnerability.
Remote authenticated users of Cisco IOS XR version 5.1.1.K9SEC are affected by CVE-2015-4195.
The consequences of CVE-2015-4195 include vty errors and outages of SSH and TELNET services.
There are no specific indications of active exploitation for CVE-2015-4195, but it is advisable to mitigate the risk.