CVE-2015-4205: Medium severity cisco ios xrv 9000 vulnerability

Published Jun 23, 2015

Updated

Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (NPU chip reset or line-card reload) by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959.

Affected Software

7 affected components

Cisco IOS XR=5.3.1

Cisco Asr 9001

Cisco Asr 9006

Cisco Asr 9010

Cisco Asr 9904

Cisco Asr 9912

Cisco Asr 9922

Event History

Jun 23, 2015

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-4205?

CVE-2015-4205 has a medium severity level as it allows for denial of service on Cisco IOS XR 5.3.1 devices.

How do I fix CVE-2015-4205?

To mitigate CVE-2015-4205, upgrade your device to a patched version of Cisco IOS XR that addresses the flow-control PAUSE frame vulnerability.

Which devices are affected by CVE-2015-4205?

CVE-2015-4205 specifically affects Cisco ASR 9000 series routers running IOS XR version 5.3.1.

What is the impact of CVE-2015-4205?

The impact of CVE-2015-4205 is that remote attackers can reset the network processing unit or reload line cards, leading to service disruption.

Who is affected by CVE-2015-4205?

Organizations using Cisco ASR 9000 devices with IOS XR version 5.3.1 could be affected by CVE-2015-4205 if they are exposed to untrusted local networks.