VULNERABILITY INTELLIGENCE
CVE-2015-6272
CVSS score7.8 HIGH
EPSS probability1.91%
CISA KEVNot currently listed
Published2015-08-31
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064.
Primary references
- psirt@cisco.com — Vendor Advisory
- psirt@cisco.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108