2025-01-26 03:03:52 +00:00

153 lines
4.8 KiB
JSON

{
"id": "CVE-2015-0708",
"sourceIdentifier": "psirt@cisco.com",
"published": "2015-04-29T01:59:00.073",
"lastModified": "2024-11-21T02:23:34.637",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956."
},
{
"lang": "es",
"value": "Cisco IOS 15.4S, 15.4SN, y 15.5S y IOS XE 3.13S y 3.14S permiten a atacantes remotos causar una denegaci\u00f3n de servicio (ca\u00edda de dispositivo) mediante la inclusi\u00f3n de una opci\u00f3n IA_NA en un mensaje DHCPv6 Solicit en la red local, tambi\u00e9n conocido como Bug ID CSCur29956."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
"baseScore": 6.1,
"accessVector": "ADJACENT_NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 6.5,
"impactScore": 6.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:ios_xe:3.13s.0:*:*:*:*:*:*:*",
"matchCriteriaId": "28303ADA-1B8E-42F6-9CD1-A457D863727B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:ios_xe:3.13s.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2B331605-E70D-4A93-AB19-6E31A31C5256"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:ios_xe:3.14s.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E34D1F55-ABD8-4F38-9CE8-C2A9CBC9A08B"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:ios:15.4\\(3\\)s:*:*:*:*:*:*:*",
"matchCriteriaId": "C63FF7C4-D9CE-4D6C-B36E-0C0DC06F453E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:ios:15.4\\(3\\)s1:*:*:*:*:*:*:*",
"matchCriteriaId": "D4408CD8-DC1D-4102-924B-E9E28FC5CECF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:ios:15.4\\(3\\)sn1:*:*:*:*:*:*:*",
"matchCriteriaId": "5F0C961B-833E-4F45-AAD0-DB8CDBC3A988"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:ios:15.4s:*:*:*:*:*:*:*",
"matchCriteriaId": "9DE6DE69-D32B-4D77-B164-9E5067701225"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:ios:15.4sn:*:*:*:*:*:*:*",
"matchCriteriaId": "B9AD49C3-6025-4EB6-AC38-972BBACAF28E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:ios:15.5\\(1\\)s:*:*:*:*:*:*:*",
"matchCriteriaId": "9613EE90-A90A-4817-A5A1-F78A9F3BA571"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:cisco:ios:15.5s:*:*:*:*:*:*:*",
"matchCriteriaId": "328176FC-7F02-40D0-8397-48A731C0C8A5"
}
]
}
]
}
],
"references": [
{
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38543",
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.securitytracker.com/id/1032210",
"source": "psirt@cisco.com"
},
{
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=38543",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.securitytracker.com/id/1032210",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}