What’s Vulnerable › Vulnerabilities

CVE-2015-6334

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-10-16 · updated 2026-06-17
• Weakness: CWE-20

Description

Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service (vpnmgr process restart) via a crafted header in a TACACS packet, aka Bug ID CSCuw01984.

Affected products

• Cisco Systems, Inc. StarOS for ASR 5000 Series Aggregated Services Routers: 18.0.0.57828, 19.0.m0.61045

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151012-asr
• http://www.securitytracker.com/id/1033792
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151012-asr
• http://www.securitytracker.com/id/1033792

Get alerted when CVE-2015-6334 or the next vulnerability affects your stack