CVE-2015-6429: Medium severity cisco ios vulnerability
Published Dec 19, 2015
·Updated
The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236.
Affected Software
18 affected components
cisco IOS=15.4\(3\)s
cisco IOS=15.5\(1\)s
cisco IOS=15.5\(1\)t
cisco IOS=15.5\(2\)s
cisco IOS=15.5\(2\)t
cisco IOS=15.5\(3\)m
cisco IOS=15.5\(3\)m1
cisco IOS=15.5\(3\)s
cisco IOS=15.5\(3\)s1
cisco IOS=15.6\(0.17\)t
cisco IOS=15.6\(1\)t0a
Cisco IOS XE=3.15s.0
Cisco IOS XE=3.15s.1
Cisco IOS XE=3.15s.2
Cisco IOS XE=3.16s.0
Cisco IOS XE=3.16s.1
Cisco IOS XE=3.17s.0
Cisco IOS XE=3.17s.1
Event History
Dec 19, 2015
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6429?
CVE-2015-6429 is classified as a denial of service vulnerability.
2
How do I fix CVE-2015-6429?
To mitigate CVE-2015-6429, upgrade to an unaffected version of Cisco IOS or IOS XE.
3
What versions are affected by CVE-2015-6429?
CVE-2015-6429 affects Cisco IOS versions 15.4 through 15.6 and IOS XE versions 3.15 through 3.17.
4
Can CVE-2015-6429 be exploited remotely?
Yes, CVE-2015-6429 can be exploited remotely through crafted IKEv1 packets.
5
What are the potential consequences of CVE-2015-6429?
Exploitation of CVE-2015-6429 may result in IPsec connection termination, leading to service disruption.