VULNERABILITY INTELLIGENCE

CVE-2015-0642

CVSS score7.8 HIGH
EPSS probability2.78%
CISA KEVNot currently listed
Published2015-03-26
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C

Description

Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum36951.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references