CVE-2015-6278
28.09.2015, 02:59
The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S does not properly implement the Control Plane Protection (aka CPPr) feature, which allows remote attackers to cause a denial of service (device reload) via a flood of ND packets, aka Bug ID CSCus19794.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | ios | 12.2\(50\)sy |
| cisco | ios | 12.2\(50\)sy1 |
| cisco | ios | 12.2\(50\)sy2 |
| cisco | ios | 12.2\(50\)sy3 |
| cisco | ios | 12.2\(50\)sy4 |
| cisco | ios | 15.0\(1\)ex |
| cisco | ios | 15.0\(1\)sy |
| cisco | ios | 15.0\(1\)sy1 |
| cisco | ios | 15.0\(1\)sy2 |
| cisco | ios | 15.0\(1\)sy3 |
| cisco | ios | 15.0\(1\)sy4 |
| cisco | ios | 15.0\(1\)sy5 |
| cisco | ios | 15.0\(1\)sy6 |
| cisco | ios | 15.0\(1\)sy7 |
| cisco | ios | 15.0\(1\)sy7a |
| cisco | ios | 15.0\(1\)sy8 |
| cisco | ios | 15.0\(2\)ea2 |
| cisco | ios | 15.0\(2\)ej |
| cisco | ios | 15.0\(2\)ej1 |
| cisco | ios | 15.0\(2\)ez |
| cisco | ios | 15.0\(2\)se |
| cisco | ios | 15.0\(2\)se1 |
| cisco | ios | 15.0\(2\)se2 |
| cisco | ios | 15.0\(2\)se3 |
| cisco | ios | 15.0\(2\)se4 |
| cisco | ios | 15.0\(2\)se5 |
| cisco | ios | 15.0\(2\)se6 |
| cisco | ios | 15.0\(2\)se7 |
| cisco | ios | 15.0\(2\)se8 |
| cisco | ios | 15.0\(2a\)ex5 |
| cisco | ios | 15.1\(1\)sy |
| cisco | ios | 15.1\(1\)sy1 |
| cisco | ios | 15.1\(1\)sy2 |
| cisco | ios | 15.1\(1\)sy3 |
| cisco | ios | 15.1\(1\)sy4 |
| cisco | ios | 15.1\(1\)sy5 |
| cisco | ios | 15.1\(2\)sg |
| cisco | ios | 15.1\(2\)sg1 |
| cisco | ios | 15.1\(2\)sg2 |
| cisco | ios | 15.1\(2\)sg3 |
| cisco | ios | 15.1\(2\)sg4 |
| cisco | ios | 15.1\(2\)sg5 |
| cisco | ios | 15.1\(2\)sg6 |
| cisco | ios | 15.1\(2\)sy |
| cisco | ios | 15.1\(2\)sy1 |
| cisco | ios | 15.1\(2\)sy2 |
| cisco | ios | 15.1\(2\)sy3 |
| cisco | ios | 15.1\(2\)sy4 |
| cisco | ios | 15.1\(2\)sy4a |
| cisco | ios | 15.1\(2\)sy5 |
| cisco | ios | 15.2\(1\)e |
| cisco | ios | 15.2\(1\)e1 |
| cisco | ios | 15.2\(1\)e2 |
| cisco | ios | 15.2\(1\)e3 |
| cisco | ios | 15.2\(1\)sy |
| cisco | ios | 15.2\(1\)sy0a |
| cisco | ios | 15.2\(2\)e |
| cisco | ios | 15.2\(2\)e1 |
| cisco | ios | 15.2\(2\)e2 |
| cisco | ios | 15.2\(2\)ea1 |
| cisco | ios | 15.2\(2a\)e1 |
| cisco | ios | 15.2\(3\)e |
| cisco | ios | 15.2\(3\)e1 |
| cisco | ios | 15.2\(3a\)e |
| cisco | ios | 15.2\(4\)s |
| cisco | ios | 15.2\(4\)s1 |
| cisco | ios | 15.2\(4\)s2 |
| cisco | ios | 15.2\(4\)s3 |
| cisco | ios | 15.2\(4\)s3a |
| cisco | ios | 15.2\(4\)s4 |
| cisco | ios | 15.2\(4\)s4a |
| cisco | ios | 15.2\(4\)s5 |
| cisco | ios | 15.2\(4\)s6 |
| cisco | ios | 15.2\(4\)s7 |
| cisco | ios | 15.3\(1\)s |
| cisco | ios | 15.3\(1\)s2 |
| cisco | ios | 15.3\(2\)s |
| cisco | ios | 15.3\(2\)s0a |
| cisco | ios | 15.3\(2\)s1 |
| cisco | ios | 15.3\(2\)s2 |
| cisco | ios | 15.3\(3\)s |
| cisco | ios | 15.3\(3\)s1 |
| cisco | ios | 15.3\(3\)s2 |
| cisco | ios | 15.3\(3\)s3 |
| cisco | ios | 15.3\(3\)s4 |
| cisco | ios | 15.3\(3\)s5 |
| cisco | ios | 15.4\(1\)s |
| cisco | ios | 15.4\(1\)s1 |
| cisco | ios | 15.4\(1\)s2 |
| cisco | ios | 15.4\(1\)s3 |
| cisco | ios | 15.4\(2\)s |
| cisco | ios | 15.4\(2\)s1 |
| cisco | ios | 15.4\(2\)s2 |
| cisco | ios | 15.4\(2\)s3 |
| cisco | ios | 15.4\(3\)s |
| cisco | ios | 15.4\(3\)s1 |
| cisco | ios | 15.4\(3\)s2 |
| cisco | ios | 15.5\(1\)s |
| cisco | ios | 15.5\(1\)s1 |
| cisco | ios_xe | 3.2se.0:se.0 |
| cisco | ios_xe | 3.2se.1:se.1 |
| cisco | ios_xe | 3.2se.2:se.2 |
| cisco | ios_xe | 3.2se.3:se.3 |
| cisco | ios_xe | 3.3se.0:se.0 |
| cisco | ios_xe | 3.3se.1:se.1 |
| cisco | ios_xe | 3.3se.2:se.2 |
| cisco | ios_xe | 3.3se.3:se.3 |
| cisco | ios_xe | 3.3se.4:se.4 |
| cisco | ios_xe | 3.3se.5:se.5 |
| cisco | ios_xe | 3.3xo.0:xo.0 |
| cisco | ios_xe | 3.3xo.1:xo.1 |
| cisco | ios_xe | 3.3xo.2:xo.2 |
| cisco | ios_xe | 3.4sg.0:sg.0 |
| cisco | ios_xe | 3.4sg.1:sg.1 |
| cisco | ios_xe | 3.4sg.2:sg.2 |
| cisco | ios_xe | 3.4sg.3:sg.3 |
| cisco | ios_xe | 3.4sg.4:sg.4 |
| cisco | ios_xe | 3.4sg.5:sg.5 |
| cisco | ios_xe | 3.4sg.6:sg.6 |
| cisco | ios_xe | 3.5e.0:e.0 |
| cisco | ios_xe | 3.5e.1:e.1 |
| cisco | ios_xe | 3.5e.2:e.2 |
| cisco | ios_xe | 3.5e.3:e.3 |
| cisco | ios_xe | 3.6e.0:e.0 |
| cisco | ios_xe | 3.6e.0a:e.0a |
| cisco | ios_xe | 3.6e.0b:e.0b |
| cisco | ios_xe | 3.6e.1:e.1 |
| cisco | ios_xe | 3.6e.2:e.2 |
| cisco | ios_xe | 3.6e.2a:e.2a |
| cisco | ios_xe | 3.7e.0:e.0 |
| cisco | ios_xe | 3.7e.1:e.1 |
| cisco | ios_xe | 3.9s.0:s.0 |
| cisco | ios_xe | 3.9s.1:s.1 |
| cisco | ios_xe | 3.9s.2:s.2 |
| cisco | ios_xe | 3.10s.0:s.0 |
| cisco | ios_xe | 3.10s.0a:s.0a |
| cisco | ios_xe | 3.10s.01:s.01 |
| cisco | ios_xe | 3.10s.1:s.1 |
| cisco | ios_xe | 3.10s.2:s.2 |
| cisco | ios_xe | 3.10s.3:s.3 |
| cisco | ios_xe | 3.10s.4:s.4 |
| cisco | ios_xe | 3.10s.5:s.5 |
| cisco | ios_xe | 3.11s.0:s.0 |
| cisco | ios_xe | 3.11s.1:s.1 |
| cisco | ios_xe | 3.11s.2:s.2 |
| cisco | ios_xe | 3.11s.3:s.3 |
| cisco | ios_xe | 3.12s.0:s.0 |
| cisco | ios_xe | 3.12s.1:s.1 |
| cisco | ios_xe | 3.12s.2:s.2 |
| cisco | ios_xe | 3.12s.3:s.3 |
| cisco | ios_xe | 3.13s.0:s.0 |
| cisco | ios_xe | 3.13s.1:s.1 |
| cisco | ios_xe | 3.13s.2:s.2 |
| cisco | ios_xe | 3.14s.0:s.0 |
| cisco | ios_xe | 3.14s.1:s.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References