CVEvulnerability

CVE-2015-6278

7.8 HIGH Published 2015-09-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-09-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S does not properly implement the Control Plane Protection (aka CPPr) feature, which allows remote attackers to cause a denial of service (device reload) via a flood of ND packets, aka Bug ID CSCus19794.

Affected configurations

• cisco ios 12.2\(50\)sy • cisco ios 12.2\(50\)sy1 • cisco ios 12.2\(50\)sy2 • cisco ios 12.2\(50\)sy3 • cisco ios 12.2\(50\)sy4 • cisco ios 15.0\(1\)ex • cisco ios 15.0\(1\)sy • cisco ios 15.0\(1\)sy1 • cisco ios 15.0\(1\)sy2 • cisco ios 15.0\(1\)sy3 • cisco ios 15.0\(1\)sy4 • cisco ios 15.0\(1\)sy5 • cisco ios 15.0\(1\)sy6 • cisco ios 15.0\(1\)sy7 • cisco ios 15.0\(1\)sy7a • cisco ios 15.0\(1\)sy8 • cisco ios 15.0\(2\)ea2 • cisco ios 15.0\(2\)ej • cisco ios 15.0\(2\)ej1 • cisco ios 15.0\(2\)ez • cisco ios 15.0\(2\)se • cisco ios 15.0\(2\)se1 • cisco ios 15.0\(2\)se2 • cisco ios 15.0\(2\)se3 • cisco ios 15.0\(2\)se4 • cisco ios 15.0\(2\)se5 • cisco ios 15.0\(2\)se6 • cisco ios 15.0\(2\)se7 • cisco ios 15.0\(2\)se8 • cisco ios 15.0\(2a\)ex5 • cisco ios 15.1\(1\)sy • cisco ios 15.1\(1\)sy1 • cisco ios 15.1\(1\)sy2 • cisco ios 15.1\(1\)sy3 • cisco ios 15.1\(1\)sy4 • cisco ios 15.1\(1\)sy5 • cisco ios 15.1\(2\)sg • cisco ios 15.1\(2\)sg1 • cisco ios 15.1\(2\)sg2 • cisco ios 15.1\(2\)sg3 • cisco ios 15.1\(2\)sg4 • cisco ios 15.1\(2\)sg5 • cisco ios 15.1\(2\)sg6 • cisco ios 15.1\(2\)sy • cisco ios 15.1\(2\)sy1 • cisco ios 15.1\(2\)sy2 • cisco ios 15.1\(2\)sy3 • cisco ios 15.1\(2\)sy4 • cisco ios 15.1\(2\)sy4a • cisco ios 15.1\(2\)sy5 • cisco ios 15.2\(1\)e • cisco ios 15.2\(1\)e1 • cisco ios 15.2\(1\)e2 • cisco ios 15.2\(1\)e3 • cisco ios 15.2\(1\)sy • cisco ios 15.2\(1\)sy0a • cisco ios 15.2\(2\)e • cisco ios 15.2\(2\)e1 • cisco ios 15.2\(2\)e2 • cisco ios 15.2\(2\)ea1 … and 95 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References