« Volver al listado

CVE-2015-0688

Estado: ModificadaAlta (7.1)—

Cisco IOS XE 3.10.2S en un dispositivo ASR 1000 con un módulo Embedded Services Processor (ESP), cuando NAT está habilitado, permite a atacantes remotos causar una denegación de servicio (caída de módulo) a través de paquetes H.323 malformados, también conocido como Bug ID CSCup21070.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — IOS XE

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-0688",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.1,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-04-04T01:59:02.593",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38210",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1032023",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38210",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032023",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module crash) via malformed H.323 packets, aka Bug ID CSCup21070."
    },
    {
      "lang": "es",
      "value": "Cisco IOS XE 3.10.2S en un dispositivo ASR 1000 con un módulo Embedded Services Processor (ESP), cuando NAT está habilitado, permite a atacantes remotos causar una denegación de servicio (caída de módulo) a través de paquetes H.323 malformados, también conocido como Bug ID CSCup21070."
    }
  ],
  "lastModified": "2026-06-17T00:20:44.533",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:13.10.2s:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB106571-2F6B-4811-A724-568A71B54777"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:asr_1001:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BB1A55A9-55DE-4CAD-BD4D-5079C35246ED"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1001-x:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7ADA8D81-4A28-4420-8D6D-8D3082F58CB6"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1002:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BE910FAF-EE5C-4901-B5E1-22ADA9C0BB0B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1002-x:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4652AC4B-B332-4C31-89F4-CA976FCECDCA"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1004:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "685AE30F-B420-4398-9AF3-67BF118C9B6A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1006:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D2416CDB-19DE-42C4-863C-72DACBE97856"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asr_1013:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9C47BA42-A7B2-4A15-8363-FEC9EA9AC6B8"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}