CVE-2015-0718

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-03-03 · updated 2026-06-17
Weakness: CWE-399

Description

Cisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified Computing System (UCS) platforms allows remote attackers to cause a denial of service (TCP stack reload) by sending crafted TCP packets to a device that has a TIME_WAIT TCP session, aka Bug ID CSCub70579.

Affected products

Cisco NX-OS: base
Cisco Unified Computing System (Managed): 1.4_1i, 1.4_1j, 1.4_1m, 1.4_3i, 1.4_3l, 1.4_3m (+53)
NETGEAR JR6150: before 2017-01-06 — fixed in 2017-01-06
Samsung X14J Firmware: t-ms14jakucb-1102.5
Sun Opensolaris: snv_124
Zyxel GS1900-10HP firmware: before 2.50\(aazi.0\)c0 — fixed in 2.50\(aazi.0\)c0
Zzinc Keymouse Firmware: 3.08

How to fix

Upgrade to a fixed version: NETGEAR JR6150 2017-01-06; Zyxel GS1900-10HP firmware 2.50\(aazi.0\)c0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2015-0718 or the next vulnerability affects your stack