CVEvulnerability
CVE-2015-0642
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum36951.
Affected configurations
• cisco ios xe 2.5.0
• cisco ios xe 2.5.1
• cisco ios xe 3.1s.0
• cisco ios xe 3.1s.1
• cisco ios xe 3.1s.2
• cisco ios xe 3.1s.3
• cisco ios xe 3.1s.4
• cisco ios xe 3.2s.0
• cisco ios xe 3.2s.1
• cisco ios xe 3.2s.2
• cisco ios xe 3.3s.0
• cisco ios xe 3.3s.1
• cisco ios xe 3.3s.2
• cisco ios xe 3.3sg.0
• cisco ios xe 3.3sg.1
• cisco ios xe 3.3sg.2
• cisco ios xe 3.3xo.0
• cisco ios xe 3.3xo.1
• cisco ios xe 3.3xo.2
• cisco ios xe 3.4s.0
• cisco ios xe 3.4s.1
• cisco ios xe 3.4s.2
• cisco ios xe 3.4s.3
• cisco ios xe 3.4s.4
• cisco ios xe 3.4s.5
• cisco ios xe 3.4s.6
• cisco ios xe 3.4sg.0
• cisco ios xe 3.4sg.1
• cisco ios xe 3.4sg.2
• cisco ios xe 3.4sg.3
• cisco ios xe 3.4sg.4
• cisco ios xe 3.4sg.5
• cisco ios xe 3.5e.0
• cisco ios xe 3.5e.1
• cisco ios xe 3.5e.2
• cisco ios xe 3.5e.3
• cisco ios xe 3.5s.0
• cisco ios xe 3.5s.1
• cisco ios xe 3.5s base
• cisco ios xe 3.6e.0
• cisco ios xe 3.6e.1
• cisco ios xe 3.6s.0
• cisco ios xe 3.6s.1
• cisco ios xe 3.6s.2
• cisco ios xe 3.6s base
• cisco ios xe 3.7e.0
• cisco ios xe 3.7s.0
• cisco ios xe 3.7s.1
• cisco ios xe 3.7s.2
• cisco ios xe 3.7s.3
• cisco ios xe 3.7s.4
• cisco ios xe 3.7s.5
• cisco ios xe 3.7s.6
• cisco ios xe 3.7s base
• cisco ios xe 3.8s.0
• cisco ios xe 3.8s.1
• cisco ios xe 3.8s.2
• cisco ios xe 3.8s base
• cisco ios xe 3.9s.0
• cisco ios xe 3.9s.1
… and 24 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ikev2 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37816 Vendor Advisory
- http://www.securityfocus.com/bid/73333 www.securityfocus.com
- http://www.securitytracker.com/id/1031978 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ikev2 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37816 Vendor Advisory
- http://www.securityfocus.com/bid/73333 www.securityfocus.com
- http://www.securitytracker.com/id/1031978 www.securitytracker.com