VULNERABILITY INTELLIGENCE

CVE-2015-0609

CVSS score7.1 HIGH
EPSS probability1.17%
CISA KEVNot currently listed
Published2015-02-16
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:C

Description

Race condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCuj96752.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references