CVE-2018-15464
Cisco ASR 900 Series Aggregation Services Router Software Denial of Service Vulnerability
- State
- Published
- Severity
- 5.8 Medium
- Published
- Jan 11, 2019
- Updated
- Nov 19, 2024
- Reserved
- Aug 17, 2018
Description
A vulnerability in Cisco 900 Series Aggregation Services Router (ASR) software could allow an unauthenticated, remote attacker to cause a partial denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of certain broadcast packets ingress to the device. An attacker could exploit this vulnerability by sending large streams of broadcast packets to an affected device. If successful, an exploit could allow an attacker to impact services running on the device, resulting in a partial DoS condition.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.8 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco ASR 900 Series Aggregation Services RoutersCisco |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.