CVEvulnerability
CVE-2015-0649
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP) TCP packets, aka Bug ID CSCun63514.
Affected configurations
• cisco ios 12.2\(33\)ird1
• cisco ios 12.2\(33\)ire3
• cisco ios 12.2\(33\)sxi4b
• cisco ios 12.2\(44\)sq1
• cisco ios 12.2\(52\)se
• cisco ios 12.2\(52\)se1
• cisco ios 12.2\(55\)se
• cisco ios 12.2\(55\)se3
• cisco ios 12.2\(55\)se4
• cisco ios 12.2\(55\)se5
• cisco ios 12.2\(55\)se6
• cisco ios 12.2\(55\)se7
• cisco ios 12.2\(55\)se8
• cisco ios 12.2\(55\)se9
• cisco ios 12.2\(58\)se2
• cisco ios 12.4\(25e\)jam1
• cisco ios 12.4\(25e\)jap1m
• cisco ios 12.4\(25e\)jaz1
• cisco ios 15.0\(1\)ey
• cisco ios 15.0\(1\)ey1
• cisco ios 15.0\(1\)ey2
• cisco ios 15.0\(2\)eb
• cisco ios 15.0\(2\)ed1
• cisco ios 15.0\(2\)ey
• cisco ios 15.0\(2\)ey1
• cisco ios 15.0\(2\)ey2
• cisco ios 15.0\(2\)ey3
• cisco ios 15.0\(2\)se
• cisco ios 15.0\(2\)se1
• cisco ios 15.0\(2\)se2
• cisco ios 15.0\(2\)se3
• cisco ios 15.0\(2\)se4
• cisco ios 15.0\(2\)se5
• cisco ios 15.0\(2\)se6
• cisco ios 15.0\(2\)se7
• cisco ios 15.2\(1\)ex
• cisco ios 15.2\(1\)ey
• cisco ios 15.2\(2\)e
• cisco ios 15.2\(2\)e1
• cisco ios 15.2\(2\)jb1
• cisco ios 15.3\(2\)s2
• cisco ios 15.3\(3\)ja1n
• cisco ios 15.3\(3\)jab1
• cisco ios 15.3\(3\)jn
• cisco ios 15.3\(3\)jnb
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness