CVE-2015-4293 - Vulnerability Details

Vendors	Products
Cisco	Ios Xe

Link	Providers
http://tools.cisco.com/security/center/viewAlert.x?alertId=40215
http://www.securitytracker.com/id/1033122

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-07-29T00:00:00", "descriptions": [{"lang": "en", "value": "The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2015-08-14T16:57:05", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "20150729 Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=40215"}, {"name": "1033122", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1033122"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2015-4293", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20150729 Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=40215"}, {"name": "1033122", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1033122"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T06:11:12.177Z"}, "title": "CVE Program Container", "references": [{"name": "20150729 Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=40215"}, {"name": "1033122", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1033122"}]}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2015-4293", "datePublished": "2015-07-30T14:00:00", "dateReserved": "2015-06-04T00:00:00", "dateUpdated": "2024-08-06T06:11:12.177Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2015-07-29T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2015-08-14T16:57:05 (string)

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

}

references : [ »

0 : { »

name : 20150729 Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

]

url : http://tools.cisco.com/security/center/viewAlert.x?alertId=40215 (string)

}

1 : { »

name : 1033122 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id/1033122 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@cisco.com (string)

ID : CVE-2015-4293 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 20150729 Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability (string)

refsource : CISCO (string)

url : http://tools.cisco.com/security/center/viewAlert.x?alertId=40215 (string)

}

1 : { »

name : 1033122 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id/1033122 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T06:11:12.177Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 20150729 Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

2 : x_transferred (string)

]

url : http://tools.cisco.com/security/center/viewAlert.x?alertId=40215 (string)

}

1 : { »

name : 1033122 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id/1033122 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

assignerShortName : cisco (string)

cveId : CVE-2015-4293 (string)

datePublished : 2015-07-30T14:00:00 (string)

dateReserved : 2015-06-04T00:00:00 (string)

dateUpdated : 2024-08-06T06:11:12.177Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xe:2.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "C798B993-8521-4C5D-88AF-2D509DBAC2AF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "127BD97D-56A0-4B75-9A19-CC499965B53D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "4A1D6AEB-26F3-4BD9-A4CA-3D54CCF158F8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "87B35652-621F-48DB-84FF-E214D42AA799", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "9E216416-E3ED-437D-A725-2297DD86EF3C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "3E8F3444-17E3-48A5-BEC1-97967F7E4EA3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "539E369A-299B-4CDE-940F-C853E08439B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.3.0t:*:*:*:*:*:*:*", "matchCriteriaId": "30FD86B1-BE1A-4D72-86B0-2EDBFF50056F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:*", "matchCriteriaId": "57F6EF3B-2F31-4449-9B2A-9114D41BBC6A", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "D1E6D907-4B38-4046-BF4F-C7DFA36F55E4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "6D0B52CA-3834-4435-A3E1-9684A41E6405", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "5976253B-339F-49C3-A538-653901E85EFA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "23AD1406-D2E4-4517-BF3E-A87C1FA8AC7E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "6D203439-1A4B-4805-8A15-5A33C612A5B4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "A2DC46EA-C766-4EBA-B686-29B3B23F0155", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "71A41531-FBC0-41DD-9965-8CAFA30488AE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "310BA9E3-8175-4220-9FC3-48390C994174", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:2.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "7B837418-4855-44BE-BA6F-0840864481A4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.10s.0:*:*:*:*:*:*:*", "matchCriteriaId": "5C1C77A7-FCD5-4558-A351-081D6678DB21", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.10s.0a:*:*:*:*:*:*:*", "matchCriteriaId": "A9B42071-2BAA-4459-B575-EBD72A111381", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.10s.1:*:*:*:*:*:*:*", "matchCriteriaId": "24C948D8-C540-4FF1-A9F7-BFB20E5541FE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.10s.2:*:*:*:*:*:*:*", "matchCriteriaId": "7AF1294B-B4F6-40CC-A115-942B18CDA361", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.10s.3:*:*:*:*:*:*:*", "matchCriteriaId": "B72E6572-FF41-4606-9DA5-FA486D591A58", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.11s.0:*:*:*:*:*:*:*", "matchCriteriaId": "C0A98DFE-18FF-455A-AFA6-49960CB98C85", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.11s.1:*:*:*:*:*:*:*", "matchCriteriaId": "277C9543-A842-45AB-A2EF-DB2F8412D748", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.11s.2:*:*:*:*:*:*:*", "matchCriteriaId": "6C942D30-8344-425E-804E-E1BB1F1F0D22", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.12s.0:*:*:*:*:*:*:*", "matchCriteriaId": "E5E6FF1A-D90D-412A-8159-E766DC14FA57", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.12s.1:*:*:*:*:*:*:*", "matchCriteriaId": "84E6DEE6-50EF-4333-B0B9-964A633734D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios_xe:3.13s.0:*:*:*:*:*:*:*", "matchCriteriaId": "28303ADA-1B8E-42F6-9CD1-A457D863727B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957."}, {"lang": "es", "value": "Vulnerabilidad en la implementaci\u00f3n del ensamblado de paquetes en Cisco IOS XE 3.13S y versiones anteriores, permite a atacantes remotos causar una denegaci\u00f3n de servicio (consumo de CPU o p\u00e9rdida del paquete) a trav\u00e9s de paquetes fragmentados (1) IPv4 o (2) IPv6 que desencadenan errores ATTN-3-SYNC_TIMEOUT tras fallos en el ensamblado, tambi\u00e9n conocido como Bug ID CSCuo37957."}], "id": "CVE-2015-4293", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2015-07-30T14:59:00.087", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=40215"}, {"source": "psirt@cisco.com", "url": "http://www.securitytracker.com/id/1033122"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=40215"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1033122"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-399"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : C798B993-8521-4C5D-88AF-2D509DBAC2AF (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 127BD97D-56A0-4B75-9A19-CC499965B53D (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 4A1D6AEB-26F3-4BD9-A4CA-3D54CCF158F8 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 87B35652-621F-48DB-84FF-E214D42AA799 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.2.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 9E216416-E3ED-437D-A725-2297DD86EF3C (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.2.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 3E8F3444-17E3-48A5-BEC1-97967F7E4EA3 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.3.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 539E369A-299B-4CDE-940F-C853E08439B2 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.3.0t:*:*:*:*:*:*:* (string)

matchCriteriaId : 30FD86B1-BE1A-4D72-86B0-2EDBFF50056F (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.3.1t:*:*:*:*:*:*:* (string)

matchCriteriaId : 57F6EF3B-2F31-4449-9B2A-9114D41BBC6A (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.3.2:*:*:*:*:*:*:* (string)

matchCriteriaId : D1E6D907-4B38-4046-BF4F-C7DFA36F55E4 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 6D0B52CA-3834-4435-A3E1-9684A41E6405 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 5976253B-339F-49C3-A538-653901E85EFA (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 23AD1406-D2E4-4517-BF3E-A87C1FA8AC7E (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.5.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 6D203439-1A4B-4805-8A15-5A33C612A5B4 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.5.2:*:*:*:*:*:*:* (string)

matchCriteriaId : A2DC46EA-C766-4EBA-B686-29B3B23F0155 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.6.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 71A41531-FBC0-41DD-9965-8CAFA30488AE (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.6.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 310BA9E3-8175-4220-9FC3-48390C994174 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:cisco:ios_xe:2.6.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 7B837418-4855-44BE-BA6F-0840864481A4 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.10s.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 5C1C77A7-FCD5-4558-A351-081D6678DB21 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.10s.0a:*:*:*:*:*:*:* (string)

matchCriteriaId : A9B42071-2BAA-4459-B575-EBD72A111381 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.10s.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 24C948D8-C540-4FF1-A9F7-BFB20E5541FE (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.10s.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 7AF1294B-B4F6-40CC-A115-942B18CDA361 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.10s.3:*:*:*:*:*:*:* (string)

matchCriteriaId : B72E6572-FF41-4606-9DA5-FA486D591A58 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.11s.0:*:*:*:*:*:*:* (string)

matchCriteriaId : C0A98DFE-18FF-455A-AFA6-49960CB98C85 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.11s.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 277C9543-A842-45AB-A2EF-DB2F8412D748 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.11s.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 6C942D30-8344-425E-804E-E1BB1F1F0D22 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.12s.0:*:*:*:*:*:*:* (string)

matchCriteriaId : E5E6FF1A-D90D-412A-8159-E766DC14FA57 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.12s.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 84E6DEE6-50EF-4333-B0B9-964A633734D1 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:o:cisco:ios_xe:3.13s.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 28303ADA-1B8E-42F6-9CD1-A457D863727B (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957. (string)

}

1 : { »

lang : es (string)

value : Vulnerabilidad en la implementación del ensamblado de paquetes en Cisco IOS XE 3.13S y versiones anteriores, permite a atacantes remotos causar una denegación de servicio (consumo de CPU o pérdida del paquete) a través de paquetes fragmentados (1) IPv4 o (2) IPv6 que desencadenan errores ATTN-3-SYNC_TIMEOUT tras fallos en el ensamblado, también conocido como Bug ID CSCuo37957. (string)

}

]

id : CVE-2015-4293 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

}

published : 2015-07-30T14:59:00.087 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://tools.cisco.com/security/center/viewAlert.x?alertId=40215 (string)

}

1 : { »

source : psirt@cisco.com (string)

url : http://www.securitytracker.com/id/1033122 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://tools.cisco.com/security/center/viewAlert.x?alertId=40215 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securitytracker.com/id/1033122 (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-399 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

Metrics

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object