CVE-2015-4205

Severity: medium (CVSS 5.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-06-23 · updated 2026-06-17
Weakness: CWE-399

Description

Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (NPU chip reset or line-card reload) by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959.

Affected products

Cisco IOS XR Software: 5.3.1

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=39455
http://www.securityfocus.com/bid/75352
http://www.securitytracker.com/id/1032691
http://tools.cisco.com/security/center/viewAlert.x?alertId=39455
http://www.securityfocus.com/bid/75352
http://www.securitytracker.com/id/1032691

Get alerted when CVE-2015-4205 or the next vulnerability affects your stack