Improper input validation in Cisco iOS Xe

CVE-2015-0644

AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.034 (87.5th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios_xe — versions 3.8s.0, 3.8s.1, 3.8s.2
  • N/a — versions n/a

Weakness classification (CWE)

References