CVE-2015-6295: Medium severity cisco nx-os vulnerability

Published Sep 20, 2015

Updated

Cisco NX-OS 6.1(2)I3(4) and 7.0(3)I1(1) on Nexus 9000 (N9K) devices allows remote attackers to cause a denial of service (CPU consumption or control-plane instability) or trigger unintended traffic forwarding via a Layer 2 packet with a reserved VLAN number, aka Bug ID CSCuw13560.

Affected Software

9 affected components

Cisco NX-OS=6.1\(2\)i3\(4\)

Cisco NX-OS=7.0\(3\)i1\(1\)

Cisco Nexus 9000

Cisco Nexus 93120tx

Cisco Nexus 93128tx

Cisco Nexus 9332pq

Cisco Nexus 9336pq Aci Spine

Cisco Nexus 9372px

Cisco Nexus 9372tx

Event History

Sep 20, 2015

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6295?

CVE-2015-6295 has a severity rating that likely ranges from medium to high due to its potential for denial of service and control-plane instability.

How do I fix CVE-2015-6295?

To fix CVE-2015-6295, it is recommended to upgrade to a patched version of Cisco NX-OS that is not affected by this vulnerability.

Which devices are affected by CVE-2015-6295?

CVE-2015-6295 specifically affects Cisco NX-OS version 6.1(2)I3(4) and 7.0(3)I1(1) on Nexus 9000 series devices.

What attack vector does CVE-2015-6295 utilize?

CVE-2015-6295 can be exploited through a remote attack that sends a Layer 2 packet with a reserved VLAN number.

What are the potential consequences of CVE-2015-6295 exploitation?

Exploitation of CVE-2015-6295 may result in CPU consumption, control-plane instability, or unintended traffic forwarding.