PT-2015-7188
CVE-2015-6334
·
تاريخ النشر
2015-10-16
·
تاريخ التحديث
2016-12-09
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045
Description
The issue allows remote attackers to cause a denial of service by restarting the vpnmgr process via a crafted header in a TACACS packet.
Recommendations
For Cisco ASR 5000 and 5500 devices with software 18.0.0.57828, update to a version that fixes the issue.
For Cisco ASR 5000 and 5500 devices with software 19.0.M0.61045, update to a version that fixes the issue.
As a temporary workaround, consider restricting access to TACACS packets to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾