VULNERABILITY INTELLIGENCE

CVE-2015-0608

CVSS score7.1 HIGH
EPSS probability1.78%
CISA KEVNot currently listed
Published2015-02-12
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:C

Description

Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCul48736.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references