CVE-2015-6334

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045

Description The issue allows remote attackers to cause a denial of service by restarting the vpnmgr process via a crafted header in a TACACS packet.

Recommendations For Cisco ASR 5000 and 5500 devices with software 18.0.0.57828, update to a version that fixes the issue. For Cisco ASR 5000 and 5500 devices with software 19.0.M0.61045, update to a version that fixes the issue. As a temporary workaround, consider restricting access to TACACS packets to minimize the risk of exploitation.