Vulnerability Details CVE-2015-6267
Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.4%
CVSS Severity
CVSS v2 Score 7.8
References
Products affected by CVE-2015-6267
-
cpe:2.3:h:cisco:asr_1001-x:-
-
cpe:2.3:h:cisco:asr_1001:-
-
cpe:2.3:h:cisco:asr_1002-x:-
-
cpe:2.3:h:cisco:asr_1002:-
-
cpe:2.3:h:cisco:asr_1004:-
-
cpe:2.3:h:cisco:asr_1006:-
-
cpe:2.3:h:cisco:asr_1013:-
-
cpe:2.3:o:cisco:ios_xe:2.2.1
-
cpe:2.3:o:cisco:ios_xe:2.2.2