Vulnerability Description
Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios Xe | 3.13s.0 |
| Cisco | Ios | 15.4\(3\)s |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38543Vendor Advisory
- http://www.securitytracker.com/id/1032210
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38543Vendor Advisory
- http://www.securitytracker.com/id/1032210
FAQ
What is CVE-2015-0708?
CVE-2015-0708 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit message on the local n...
How severe is CVE-2015-0708?
CVE-2015-0708 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0708?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios Xe, Cisco Ios.