VULNERABILITY INTELLIGENCE

CVE-2015-4203

CVSS score5.4 MEDIUM
EPSS probability2.21%
CISA KEVNot currently listed
Published2015-06-23
Last modified2026-06-17
CVSS vectorAV:N/AC:H/Au:N/C:N/I:N/A:C

Description

Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references