4.9

CVE-2015-4277

The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service (tmp/*config file creation, memory consumption, and device hang) via unspecified vectors, aka Bug ID CSCut93842.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Nx-os Version 5.1.3
   Cisco ≫ Nexus 93120tx Version -
   Cisco ≫ Nexus 93128tx Version -
   Cisco ≫ Nexus 9332pq Version -
   Cisco ≫ Nexus 9336pq Aci Spine Version -
   Cisco ≫ Nexus 9372px Version -
   Cisco ≫ Nexus 9372tx Version -
   Cisco ≫ Nexus 9396px Version -
   Cisco ≫ Nexus 9396tx Version -
   Cisco ≫ Nexus 9504 Version -
   Cisco ≫ Nexus 9508 Version -
   Cisco ≫ Nexus 9516 Version -
Cisco ≫ Nx-os Version 5.3.0
   Cisco ≫ Nexus 93120tx Version -
   Cisco ≫ Nexus 93128tx Version -
   Cisco ≫ Nexus 9332pq Version -
   Cisco ≫ Nexus 9336pq Aci Spine Version -
   Cisco ≫ Nexus 9372px Version -
   Cisco ≫ Nexus 9372tx Version -
   Cisco ≫ Nexus 9396px Version -
   Cisco ≫ Nexus 9396tx Version -
   Cisco ≫ Nexus 9504 Version -
   Cisco ≫ Nexus 9508 Version -
   Cisco ≫ Nexus 9516 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.264
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://tools.cisco.com/security/center/viewAlert.x?alertId=39939
Vendor Advisory
http://www.securitytracker.com/id/1033259