CVEvulnerability
CVE-2015-0608
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-02-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-362
Description
Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCul48736.
Affected configurations
• cisco ios (<= 15.4\(2\)t3)
• cisco ios 15.4\(1\)t
• cisco ios 15.4\(1\)t1
• cisco ios 15.4\(1\)t2
• cisco ios 15.4\(1\)t3
• cisco ios 15.4\(1\)t4
• cisco ios 15.4\(2\)t
• cisco ios 15.4\(2\)t1
• cisco ios 15.4\(2\)t2
• cisco ios 15.4t
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0608 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37421 Vendor Advisory
- http://www.securityfocus.com/bid/72566 www.securityfocus.com
- http://www.securitytracker.com/id/1031731 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100808 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0608 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37421 Vendor Advisory
- http://www.securityfocus.com/bid/72566 www.securityfocus.com
- http://www.securitytracker.com/id/1031731 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100808 exchange.xforce.ibmcloud.com