« Volver al listado

CVE-2015-0769

Estado: ModificadaAlta (7.8)—

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service (NPU ASIC scan and line-card reload) via crafted IPv6 extension headers, aka Bug ID CSCtx03546.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — IOS XR Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-0769",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-06-12T14:59:01.113",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150611-iosxr",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1032563",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150611-iosxr",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032563",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service (NPU ASIC scan and line-card reload) via crafted IPv6 extension headers, aka Bug ID CSCtx03546."
    },
    {
      "lang": "es",
      "value": "Cisco IOS XR 4.0.1 hasta 4.2.0 para CRS-3 Carrier Routing System permite a atacantes remotos causar una denegación de servicio (escaneo NPU ASIC y recarga de la tarjeta de línea) a través de cabeceras de extensión IPv6 manipuladas, también conocida como Bug ID CSCtx03546."
    }
  ],
  "lastModified": "2026-06-17T00:20:52.537",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ios_xr_software:4.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B40261BE-3C8C-4519-9D30-033982B28D2D"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xr_software:4.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "449FC52E-F5D6-4667-8F76-67512757BBDB"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xr_software:4.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D907DF57-CEFD-4399-B3E6-22CEDF0E6930"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xr_software:4.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "42AB82F9-8E65-42CA-BE07-6B67B523B356"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xr_software:4.0.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DEF92AF9-CB4A-4521-BC1A-19B432E3E5D3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xr_software:4.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4189F0A-D0AC-4F8A-BCD0-447BD2C07B79"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xr_software:4.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85EA55F4-6DF6-48D8-8DBC-0037423C3704"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xr_software:4.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A9EC099-ABC3-4431-8E0B-C938242EDCD6"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xr_software:4.1_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9316BD4-A74F-450F-A931-DFAAA4CECC59"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xr_software:4.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43C2104E-37A8-48F3-B445-F23C5E295E49"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}