CVEvulnerability
CVE-2015-0609
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-02-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-362
Description
Race condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCuj96752.
Affected configurations
• cisco ios (<= 15.4\(2\)t3)
• cisco ios 15.4\(1\)t
• cisco ios 15.4\(1\)t1
• cisco ios 15.4\(1\)t2
• cisco ios 15.4\(1\)t3
• cisco ios 15.4\(1\)t4
• cisco ios 15.4\(2\)t
• cisco ios 15.4\(2\)t1
• cisco ios 15.4\(2\)t2
• cisco ios 15.4t
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0609 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37420 Vendor Advisory
- http://www.securityfocus.com/bid/72564 www.securityfocus.com
- http://www.securitytracker.com/id/1031731 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100809 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0609 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37420 Vendor Advisory
- http://www.securityfocus.com/bid/72564 www.securityfocus.com
- http://www.securitytracker.com/id/1031731 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100809 exchange.xforce.ibmcloud.com