VulnerabilityModified
CVE-2015-4273
The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 15.0(912), 15.0(935), and 15.0(938) allows remote attackers to cause a denial of service (Session Manager outage) via malformed fields in an IP packet, aka Bug…
MEDIUM 5.0EPSS 1.99%
Does this matter?
Lower severity and a low EPSS score (1.99%). Track it; it rarely justifies an emergency change on its own.
Description
The Packet Data Network Gateway (aka PGW) component on Cisco ASR 5000 devices with software 15.0(912), 15.0(935), and 15.0(938) allows remote attackers to cause a denial of service (Session Manager outage) via malformed fields in an IP packet, aka Bug ID CSCut38476.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 1.99% probability · 79th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/asr 5000 series software
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39907Vendor Advisory
- http://www.securitytracker.com/id/1032928Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39907Vendor Advisory
- http://www.securitytracker.com/id/1032928Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.