CVE-2015-4203

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-06-23 · updated 2026-06-17
Weakness: CWE-362

Description

Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.

Affected products

Cisco IOS: 12.2(33)sch, 12.2sch

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=39439
http://www.securityfocus.com/bid/75339
http://www.securitytracker.com/id/1032692
http://tools.cisco.com/security/center/viewAlert.x?alertId=39439
http://www.securityfocus.com/bid/75339
http://www.securitytracker.com/id/1032692

Get alerted when CVE-2015-4203 or the next vulnerability affects your stack