« Volver al listado

CVE-2015-4243

Estado: ModificadaMedia (6.1)—

La implementación de establecimiento PPPoE en Cisco IOS XE 3.5.0S en los dispositivos ASR 1000 permite a atacantes causar una denegación de servicio (recarga de dispositivo) mediante el envío de paquetes PPPoE Active Discovery Request (PADR) malformados en la red local, también conocido como Bug ID CSCty94202.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — IOS XE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-4243",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.1,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-07-08T14:59:03.817",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39675",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1032805",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=39675",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032805",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service (device reload) by sending malformed PPPoE Active Discovery Request (PADR) packets on the local network, aka Bug ID CSCty94202."
    },
    {
      "lang": "es",
      "value": "La implementación de establecimiento PPPoE en Cisco IOS XE 3.5.0S en los dispositivos ASR 1000 permite a atacantes causar una denegación de servicio (recarga de dispositivo) mediante el envío de paquetes PPPoE Active Discovery Request (PADR) malformados en la red local, también conocido como Bug ID CSCty94202."
    }
  ],
  "lastModified": "2026-06-17T00:26:59.237",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.5.0s:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5872A42F-745E-4EC6-8679-C28F79F6621C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ED7C321E-F083-4AB6-96A0-D6358980441E"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "09C913FF-63D5-43FB-8B39-598EF436BA5A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E4376E56-A21C-4642-A85D-439C8E21CD7F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "444F688F-79D0-4F22-B530-7BD520080B8F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "55DD2272-10C2-43B9-9F13-6DC41DBE179B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7428E0A8-1641-47FB-9CA9-34311DEF660D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "854D9594-FE84-4E7B-BA21-A3287F2DC302"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}