CVE-2015-0688

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-04-04 · updated 2026-06-17
Weakness: CWE-399

Description

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause a denial of service (module crash) via malformed H.323 packets, aka Bug ID CSCup21070.

Affected products

Cisco IOS XE: 13.10.2s

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=38210
http://www.securitytracker.com/id/1032023
http://tools.cisco.com/security/center/viewAlert.x?alertId=38210
http://www.securitytracker.com/id/1032023

Get alerted when CVE-2015-0688 or the next vulnerability affects your stack