CVE-2015-6392

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-10-06 · updated 2026-06-17
Weakness: CWE-399

Description

Cisco NX-OS 4.1 through 7.3 and 11.0 through 11.2 on Nexus 2000, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device crash) via crafted IPv4 DHCP packets to the (1) DHCPv4 relay agent or (2) smart relay agent, aka Bug IDs CSCuq24603, CSCur93159, CSCus21693, and CSCut76171.

Affected products

Cisco NX-OS: 4.1.(2), 4.1.(3), 4.1.(4), 4.1.(5), 4.2(3), 4.2(4) (+99)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp1
http://www.securityfocus.com/bid/93406
http://www.securitytracker.com/id/1036948
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp1
http://www.securityfocus.com/bid/93406
http://www.securitytracker.com/id/1036948

Get alerted when CVE-2015-6392 or the next vulnerability affects your stack