CVEvulnerability

CVE-2015-0647

7.8 HIGH Published 2015-03-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-03-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) UDP packets, aka Bug ID CSCum98371.

Affected configurations

• cisco ios 12.2\(33\)ird1 • cisco ios 12.2\(33\)ire3 • cisco ios 12.2\(33\)sxi4b • cisco ios 12.2\(44\)ex • cisco ios 12.2\(44\)ex1 • cisco ios 12.2\(44\)sq1 • cisco ios 12.2\(46\)se • cisco ios 12.2\(46\)se1 • cisco ios 12.2\(46\)se2 • cisco ios 12.2\(50\)se • cisco ios 12.2\(50\)se1 • cisco ios 12.2\(50\)se2 • cisco ios 12.2\(50\)se3 • cisco ios 12.2\(50\)se4 • cisco ios 12.2\(50\)se5 • cisco ios 12.2\(52\)se • cisco ios 12.2\(52\)se1 • cisco ios 12.2\(55\)se • cisco ios 12.2\(55\)se3 • cisco ios 12.2\(55\)se4 • cisco ios 12.2\(55\)se5 • cisco ios 12.2\(55\)se6 • cisco ios 12.2\(55\)se7 • cisco ios 12.2\(55\)se8 • cisco ios 12.2\(55\)se9 • cisco ios 12.2\(58\)se2 • cisco ios 12.4\(25e\)jam1 • cisco ios 12.4\(25e\)jap1m • cisco ios 12.4\(25e\)jaz1 • cisco ios 15.0\(1\)ey • cisco ios 15.0\(1\)ey1 • cisco ios 15.0\(1\)ey2 • cisco ios 15.0\(2\)eb • cisco ios 15.0\(2\)ed1 • cisco ios 15.0\(2\)ey • cisco ios 15.0\(2\)ey1 • cisco ios 15.0\(2\)ey2 • cisco ios 15.0\(2\)ey3 • cisco ios 15.0\(2\)se • cisco ios 15.0\(2\)se1 • cisco ios 15.0\(2\)se2 • cisco ios 15.0\(2\)se3 • cisco ios 15.0\(2\)se4 • cisco ios 15.0\(2\)se5 • cisco ios 15.0\(2\)se6 • cisco ios 15.0\(2\)se7 • cisco ios 15.2\(1\)ex • cisco ios 15.2\(1\)ey • cisco ios 15.2\(2\)e1 • cisco ios 15.2\(2\)jb1 • cisco ios 15.3\(2\)s2 • cisco ios 15.3\(3\)ja • cisco ios 15.3\(3\)ja1 • cisco ios 15.3\(3\)ja1m • cisco ios 15.3\(3\)ja1n • cisco ios 15.3\(3\)jaa • cisco ios 15.3\(3\)jab • cisco ios 15.3\(3\)jab1 • cisco ios 15.3\(3\)jnb

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References