Unscored severity · published Jun 12, 2015
CVE-2015-0769
Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service (NPU ASIC scan and line-card reload) via crafted IPv6…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service (NPU ASIC scan and line-card reload) via crafted IPv6 extension headers, aka Bug ID CSCtx03546.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IX
Ios XR Software · Cisco
4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.11; 4.1.0; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0769
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0769
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150611-iosxr
Third Party Advisory
http://www.securitytracker.com/id/1032563
More from Ios XR Software
8.8
CVE-2022-20655
A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack
7.8
CVE-2024-20398
Cisco IOS XR Software Local Privilege Escalation Vulnerability
7.8
CVE-2023-20236
A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device
6.7
CVE-2024-20456
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and…
5.8
CVE-2024-20315
A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to…