CVE-2015-6294

Severity: medium (CVSS 6.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-09-18 · updated 2026-06-17
Weakness: CWE-399

Description

Cisco IOS 15.2(3)E and earlier and IOS XE 3.6(2)E and earlier allow remote attackers to cause a denial of service (functionality loss) via crafted Cisco Discovery Protocol (CDP) packets, aka Bug ID CSCuu25770.

Affected products

Cisco IOS: 15.2(2)e, 15.2(2)e1, 15.2(2)e2, 15.2(3)e, 15.2e
Cisco IOS XE: 3.6e.0, 3.6e.1, 3.6e.2

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=41006
http://www.securitytracker.com/id/1033612
http://tools.cisco.com/security/center/viewAlert.x?alertId=41006
http://www.securitytracker.com/id/1033612

Get alerted when CVE-2015-6294 or the next vulnerability affects your stack