CVE-2015-6282

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-09-26 · updated 2026-06-17
Weakness: CWE-20

Description

Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service (device reload) via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933.

Affected products

Cisco IOS XE: 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.2.1, 2.2.2 (+89)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-iosxe
http://www.securitytracker.com/id/1033645
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-iosxe
http://www.securitytracker.com/id/1033645

Get alerted when CVE-2015-6282 or the next vulnerability affects your stack