CVE-2015-4243: Medium severity cisco ios xe software vulnerability
Published Jul 8, 2015
·Updated
The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload) by sending malformed PPPoE Active Discovery Request (PADR) packets on the local network, aka Bug ID CSCty94202.
Affected Software
8 affected components
Cisco IOS XE=3.5.0s
Cisco Asr 1001
Cisco Asr 1001-x
Cisco Asr 1002
Cisco Asr 1002-x
Cisco Asr 1004
Cisco Asr 1006
Cisco Asr 1013
Event History
Jul 8, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4243?
CVE-2015-4243 is classified as a denial of service vulnerability that could lead to device reload.
2
How do I fix CVE-2015-4243?
To mitigate CVE-2015-4243, ensure that your Cisco IOS XE is updated to a non-vulnerable version.
3
Which devices are affected by CVE-2015-4243?
CVE-2015-4243 specifically affects Cisco IOS XE 3.5.0S running on ASR 1000 devices.
4
What type of attack does CVE-2015-4243 involve?
CVE-2015-4243 involves remote attackers sending malformed PPPoE Active Discovery Request packets.
5
Is the vulnerability CVE-2015-4243 exploitable over the internet?
Yes, the vulnerability can potentially be exploited by remote attackers on the local network.