Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-6429

The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a crafted IKEv1 packet to a tunnel endpoint, aka Bug ID CSCuw08236.

Published

2015-12-19T14:59:00.123

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-19
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios 15.4\(3\)s Yes
Operating System cisco ios 15.5\(1\)s Yes
Operating System cisco ios 15.5\(1\)t Yes
Operating System cisco ios 15.5\(2\)s Yes
Operating System cisco ios 15.5\(2\)t Yes
Operating System cisco ios 15.5\(3\)m Yes
Operating System cisco ios 15.5\(3\)m1 Yes
Operating System cisco ios 15.5\(3\)s Yes
Operating System cisco ios 15.5\(3\)s1 Yes
Operating System cisco ios 15.6\(0.17\)t Yes
Operating System cisco ios 15.6\(1\)t0a Yes
Operating System cisco ios_xe 3.15s.0 Yes
Operating System cisco ios_xe 3.15s.1 Yes
Operating System cisco ios_xe 3.15s.2 Yes
Operating System cisco ios_xe 3.16s.0 Yes
Operating System cisco ios_xe 3.16s.1 Yes
Operating System cisco ios_xe 3.17s.0 Yes
Operating System cisco ios_xe 3.17s.1 Yes
References