Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2015-0681 | First vendor Publication | 2015-07-24 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:N/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.1 | Attack Range | Network |
| Cvss Impact Score | 6.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO before 3.3.0XO; 3.2.xSQ; 3.3.xSQ; and 3.4.xSQ allows remote attackers to cause a denial of service (device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSCts66733. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0681 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-399 | Resource Management Errors |
CPE : Common Platform Enumeration
Information Assurance Vulnerability Management (IAVM)
| Date | Description |
|---|---|
| 2015-07-30 | IAVM : 2015-A-0175 - Multiple Vulnerabilities in Cisco IOS XE Severity : Category I - VMSKEY : V0061141 |
| 2015-07-30 | IAVM : 2015-A-0177 - Cisco IOS Denial of Service Vulnerability Severity : Category I - VMSKEY : V0061143 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2015-07-22 | Cisco IOS TFTP server denial of service attempt RuleID : 35343 - Revision : 1 - Type : PROTOCOL-TFTP |
| 2015-07-22 | Cisco IOS TFTP server denial of service attempt RuleID : 35342 - Revision : 1 - Type : PROTOCOL-TFTP |
| 2015-07-22 | Cisco IOS TFTP server denial of service attempt RuleID : 35341 - Revision : 1 - Type : PROTOCOL-TFTP |
| 2015-07-22 | Cisco IOS TFTP server denial of service attempt RuleID : 35340 - Revision : 1 - Type : PROTOCOL-TFTP |
| 2015-07-22 | Cisco IOS TFTP server denial of service attempt RuleID : 35339 - Revision : 1 - Type : PROTOCOL-TFTP |
| 2015-07-22 | Cisco IOS TFTP server denial of service attempt RuleID : 35338 - Revision : 1 - Type : PROTOCOL-TFTP |
| 2015-07-22 | Cisco IOS TFTP server denial of service attempt RuleID : 35337 - Revision : 1 - Type : PROTOCOL-TFTP |
| 2015-07-22 | Cisco IOS TFTP server denial of service attempt RuleID : 35336 - Revision : 1 - Type : PROTOCOL-TFTP |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2015-07-30 | Name : The remote device is missing a vendor-supplied security patch. File : cisco-sa-20150722-tftp-ios.nasl - Type : ACT_GATHER_INFO |
| 2015-07-30 | Name : The remote device is missing a vendor-supplied security patch. File : cisco-sa-20150722-tftp-iosxe.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 12:44:55 |
|
| 2021-05-04 12:36:24 |
|
| 2021-04-22 01:44:08 |
|
| 2020-05-23 00:43:39 |
|
| 2017-09-21 09:25:15 |
|
| 2016-04-27 01:44:29 |
|
| 2015-10-18 17:23:23 |
|
| 2015-08-04 17:25:58 |
|
| 2015-07-31 13:28:52 |
|
| 2015-07-31 05:26:35 |
|
| 2015-07-27 21:28:01 |
|
| 2015-07-24 21:27:04 |
|
