CVE-2015-4277

The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service (tmp/*config file creation, memory consumption, and device hang) via unspecified vectors, aka Bug ID CSCut93842.

Score

CVSS 2.0 4.9 Medium

Status

Modified - psirt@cisco.com

Published

2015-08-19

Last modified

2024-08-06

Weaknesses

CWE-399

Affected products

• Nx-os (Cisco)

References

• http://tools.cisco.com/security/center/viewAlert.x?alertId=39939
• http://www.securitytracker.com/id/1033259