VULNERABILITY INTELLIGENCE

CVE-2015-4277

CVSS score4.9 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2015-08-19
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:C

Description

The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service (tmp/*config file creation, memory consumption, and device hang) via unspecified vectors, aka Bug ID CSCut93842.

Primary references