CVEvulnerability
CVE-2015-6279
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-09-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S allows remote attackers to cause a denial of service (device reload) via a malformed ND packet with the Cryptographically Generated Address (CGA) option, aka Bug ID CSCuo04400.
Affected configurations
• cisco ios 12.2\(50\)sy
• cisco ios 12.2\(50\)sy1
• cisco ios 12.2\(50\)sy2
• cisco ios 12.2\(50\)sy3
• cisco ios 12.2\(50\)sy4
• cisco ios 15.0\(1\)ex
• cisco ios 15.0\(1\)sy
• cisco ios 15.0\(1\)sy1
• cisco ios 15.0\(1\)sy2
• cisco ios 15.0\(1\)sy3
• cisco ios 15.0\(1\)sy4
• cisco ios 15.0\(1\)sy5
• cisco ios 15.0\(1\)sy6
• cisco ios 15.0\(1\)sy7
• cisco ios 15.0\(1\)sy7a
• cisco ios 15.0\(1\)sy8
• cisco ios 15.0\(2\)ea2
• cisco ios 15.0\(2\)ej
• cisco ios 15.0\(2\)ej1
• cisco ios 15.0\(2\)ez
• cisco ios 15.0\(2\)se
• cisco ios 15.0\(2\)se1
• cisco ios 15.0\(2\)se2
• cisco ios 15.0\(2\)se3
• cisco ios 15.0\(2\)se4
• cisco ios 15.0\(2\)se5
• cisco ios 15.0\(2\)se6
• cisco ios 15.0\(2\)se7
• cisco ios 15.0\(2a\)ex5
• cisco ios 15.1\(1\)sy
• cisco ios 15.1\(1\)sy1
• cisco ios 15.1\(1\)sy2
• cisco ios 15.1\(1\)sy3
• cisco ios 15.1\(1\)sy4
• cisco ios 15.1\(1\)sy5
• cisco ios 15.1\(2\)sg
• cisco ios 15.1\(2\)sg1
• cisco ios 15.1\(2\)sg2
• cisco ios 15.1\(2\)sg3
• cisco ios 15.1\(2\)sg4
• cisco ios 15.1\(2\)sg5
• cisco ios 15.1\(2\)sy
• cisco ios 15.1\(2\)sy1
• cisco ios 15.1\(2\)sy2
• cisco ios 15.1\(2\)sy3
• cisco ios 15.1\(2\)sy4
• cisco ios 15.1\(2\)sy4a
• cisco ios 15.2\(1\)e
• cisco ios 15.2\(1\)e1
• cisco ios 15.2\(1\)e2
• cisco ios 15.2\(1\)e3
• cisco ios 15.2\(1\)sy
• cisco ios 15.2\(1\)sy0a
• cisco ios 15.2\(2\)e
• cisco ios 15.2\(2\)e1
• cisco ios 15.2\(2\)e2
• cisco ios 15.2\(2\)ea1
• cisco ios 15.2\(2a\)e1
• cisco ios 15.2\(3\)e
• cisco ios 15.2\(3a\)e
… and 79 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs/cvrf/cisco-sa-20150923-fhs_cvrf.xml Vendor Advisory
- http://www.securitytracker.com/id/1033647 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs/cvrf/cisco-sa-20150923-fhs_cvrf.xml Vendor Advisory
- http://www.securitytracker.com/id/1033647 Third Party Advisory, VDB Entry