Cisco IOS Software Common Industrial Protocol (CIP) Multiple Denial of Service Vulnerabilities
BID:73334
Info
Cisco IOS Software Common Industrial Protocol (CIP) Multiple Denial of Service Vulnerabilities
| Bugtraq ID: | 73334 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2015-0647 CVE-2015-0648 CVE-2015-0649 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 25 2015 12:00AM |
| Updated: | Mar 25 2015 12:00AM |
| Credit: | The Cisco Product Security Incident Response Team (PSIRT) |
| Vulnerable: |
Cisco IOS 15.3S Cisco Ios 15.3JNB Cisco Ios 15.3JN Cisco Ios 15.3JAB Cisco Ios 15.3JAA Cisco IOS 15.3JA Cisco Ios 15.3(3)JNB Cisco Ios 15.3(3)JAB1 Cisco Ios 15.3(3)JAB Cisco Ios 15.3(3)JAA Cisco IOS 15.3(3)JA75 Cisco Ios 15.3(3)JA1n Cisco Ios 15.3(3)JA1m Cisco Ios 15.3(3)JA100 Cisco Ios 15.3(3)JA1 Cisco Ios 15.3(3)JA Cisco IOS 15.3(2)S2 Cisco Ios 15.2JB Cisco Ios 15.2JAZ Cisco Ios 15.2EY Cisco IOS 15.2EX Cisco Ios 15.2(4)JAZ Cisco Ios 15.2(2)JB1 Cisco Ios 15.2(1)EY1 Cisco Ios 15.2(1)EY Cisco Ios 15.2(1)EX Cisco IOS 15.0SE Cisco Ios 15.0EY Cisco IOS 15.0ED Cisco Ios 15.0EB Cisco Ios 15.0(2)SE7 Cisco IOS 15.0(2)SE6 Cisco IOS 15.0(2)SE5 Cisco IOS 15.0(2)SE4 Cisco IOS 15.0(2)SE3 Cisco IOS 15.0(2)SE2 Cisco IOS 15.0(2)SE1 Cisco IOS 15.0(2)SE Cisco IOS 15.0(2)EY3 Cisco Ios 15.0(2)EY2 Cisco Ios 15.0(2)EY1 Cisco IOS 15.0(2)EY Cisco IOS 15.0(2)ED1 Cisco Ios 15.0(2)EB Cisco Ios 15.0(1)EY2 Cisco Ios 15.0(1)EY1 Cisco Ios 15.0(1)EY Cisco Ios 12.4JAZ Cisco Ios 12.4JAP Cisco Ios 12.4JAM Cisco Ios 12.4(25e)JAZ1 Cisco Ios 12.4(25e)JAP1m Cisco Ios 12.4(25e)JAM1 Cisco IOS 12.2SXI Cisco IOS 12.2SQ Cisco IOS 12.2SE Cisco IOS 12.2IRE Cisco IOS 12.2IRD Cisco IOS 12.2EX Cisco IOS 12.2(58)SE2 Cisco IOS 12.2(55)SE8 Cisco IOS 12.2(55)SE7 Cisco IOS 12.2(55)SE6 Cisco IOS 12.2(55)SE5 Cisco IOS 12.2(55)SE4 Cisco IOS 12.2(55)SE3 Cisco IOS 12.2(55)SE1 Cisco IOS 12.2(55)SE Cisco IOS 12.2(52)SE1 Cisco IOS 12.2(52)SE Cisco IOS 12.2(50)SE5 Cisco IOS 12.2(50)SE4 Cisco IOS 12.2(50)SE3 Cisco IOS 12.2(50)SE2 Cisco IOS 12.2(50)SE1 Cisco IOS 12.2(50)SE Cisco IOS 12.2(46)SE2 Cisco Ios 12.2(46)SE1 Cisco IOS 12.2(46)SE Cisco IOS 12.2(44)SQ1 Cisco Ios 12.2(44)EX1 Cisco IOS 12.2(44)EX Cisco Ios 12.2(33)SXI4b Cisco IOS 12.2(33)IRE3 Cisco IOS 12.2(33)IRD1 |
| Not Vulnerable: | |
Discussion
Cisco IOS Software Common Industrial Protocol (CIP) Multiple Denial of Service Vulnerabilities
Cisco IOS Software is prone to multiple denial-of-service vulnerabilities.
Successful exploits may allow an attacker to cause memory leak or reload of an affected device, resulting in denial-of-service conditions.
These issues are being tracked by Cisco Bug IDs CSCum98371, CSCun49658 and CSCun63514.
Cisco IOS Software is prone to multiple denial-of-service vulnerabilities.
Successful exploits may allow an attacker to cause memory leak or reload of an affected device, resulting in denial-of-service conditions.
These issues are being tracked by Cisco Bug IDs CSCum98371, CSCun49658 and CSCun63514.
Exploit / POC
Cisco IOS Software Common Industrial Protocol (CIP) Multiple Denial of Service Vulnerabilities
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Cisco IOS Software Common Industrial Protocol (CIP) Multiple Denial of Service Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco IOS Software Common Industrial Protocol (CIP) Multiple Denial of Service Vulnerabilities
References:
References:
- Cisco Homepage (Cisco )
- Cisco IOS Homepage (Cisco Systems)
- Cisco IOS Software TCP CIP Denial of Service Vulnerability (Cisco)
- Cisco IOS Software TCP CIP Packet Memory Leak Vulnerability (Cisco)
- Cisco IOS Software UDP CIP Denial of Service Vulnerability (Cisco)
- Multiple Vulnerabilities in Cisco IOS Software Common Industrial Protocol (Cisco)