Improper input validation in Cisco Asr_5000_software
CVE-2015-6334
Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service (vpnmgr process restart) via a crafted header in a TACACS packet, aka Bug ID CSCuw01984.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.005 (64.3th percentile) — read the EPSS interpretation.
Affected products
- Cisco Asr_5000_software — versions 18.0.0.57828, 19.0.m0.61045
- N/a — versions n/a
Weakness classification (CWE)
References
- 1033792 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
- 20151012 Cisco ASR 5000 and ASR 5500 TACACS Denial of Service Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)