Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-4203

Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.

Published

2015-06-23T14:59:01.370

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: COMPLETE

Exploitability Score

4.9

Impact Score

6.9

Weaknesses

Type: Primary
CWE-362

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	cisco	ios	12.2\(33\)sch	Yes
Operating System	cisco	ios	12.2sch	Yes
Hardware	cisco	ubr10000_cable_modem_termination_system	-	No

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=39439 Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/75339 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1032692 Third Party Advisory, VDB Entry ([email protected])
http://tools.cisco.com/security/center/viewAlert.x?alertId=39439 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/75339 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1032692 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)