NVD

Id
23095  
Name
CVE-2015-0635  
Description
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority (ANRA) responses, and consequently bypass intended device and node access restrictions or cause a denial of service (disrupted domain access), via crafted AN messages, aka Bug ID CSCup62191.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
8.5  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:C)  
Pub Date
2017-01-19  
Published
2015-03-26  
Modified Date
2015-10-01  
Seq
2015-0635  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
122879 23095 CVE-2015-0635 20150325 Multiple Vulnerabilities in Cisco IOS Software and IOS XE Software Autonomic Networking Infrastructure  View
122880 23095 CVE-2015-0635 1031982  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6621 JVNDB-2015-001941 Cisco IOS および IOS XE の Autonomic Networking Infrastructure の実装における ANRA レスポンスを偽装され脆弱性 Cisco IOS および IOS XE の Autonomic Networking Infrastructure (ANI) の実装には、Autonomic Networking Registration Authority (ANRA) レスポンスを偽装され、その結果、デバイスおよびノードアクセスの制限を回避される脆弱性が存在します。 CVE-2015-0635 77846 CVE-2015-0635 23095 9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001941.html 2015-03-25 2015-03-30 View