CVE-2015-6289 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

Cisco IOS 15.5(3)M on Integrated Services Router (ISR) 800, 819, and 829 devices allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets on the SSH port, aka Bug ID CSCuu13476.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Cisco	Ios	15.5\(3\)m
Cisco	800 Integrated Services Router	All versions
Cisco	819 Integrated Services Router	All versions
Cisco	829 Integrated Services Router	All versions

Related Weaknesses (CWE)

CWE-399

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20Vendor Advisory
http://www.securityfocus.com/bid/91322Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036141Third Party AdvisoryVDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20Vendor Advisory
http://www.securityfocus.com/bid/91322Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036141Third Party AdvisoryVDB Entry

FAQ

What is CVE-2015-6289?

CVE-2015-6289 is a vulnerability with a CVSS score of 7.5 (HIGH). Cisco IOS 15.5(3)M on Integrated Services Router (ISR) 800, 819, and 829 devices allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets on the SSH port, aka ...

How severe is CVE-2015-6289?

CVE-2015-6289 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-6289?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios, Cisco 800 Integrated Services Router, Cisco 819 Integrated Services Router, Cisco 829 Integrated Services Router.