Improper input validation in Cisco iOS

CVE-2015-0650

The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) by sending malformed mDNS UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCup70579.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.020 (78.3th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 12.2, 12.4, 15.0
  • Cisco Ios_xe — versions 3.9s.0, 3.9s.1, 3.9s.2
  • N/a — versions n/a

Weakness classification (CWE)

References