Vulnerability in Cisco Asr 5000
CVE-2015-0712
The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and packet loss) via malformed HTTP packets, aka Bug ID CSCud14217.
EPSS: 0.012 (66.1th percentile) — read the EPSS interpretation.
Affected products
- Cisco Asr_5000
- Cisco Asr_5500
- Cisco Asr_5700
- Cisco Staros — versions 12.0, 12.2\(300\), 14.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)