CVE-2015-4285
Last modified
CVE-2015-4285 is a vulnerability of currently unknown severity. The Local Packet Transport Services (LPTS) implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service (resource consumption) by sending traffic to these ports continuously, aka Bug ID CSCur88273.. EPSS estimates a 1.74% chance of exploitation in the next 30 days.
Description
The Local Packet Transport Services (LPTS) implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service (resource consumption) by sending traffic to these ports continuously, aka Bug ID CSCur88273.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios Xr | 5.1.2 |
| Cisco | Ios Xr | 5.1.3 |
| Cisco | Ios Xr | 5.2.1 |
| Cisco | Ios Xr | 5.2.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-4285?
How severe is CVE-2015-4285?
How do I fix CVE-2015-4285?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-4279The Manager component in Cisco Unified Computing System (UCS…
- CVE-2015-4280Cisco Prime Collaboration Assurance 10.0 allows remote attac…
- CVE-2015-4281Cross-site request forgery (CSRF) vulnerability in Cisco Web…
- CVE-2015-4282Cisco Mobility Services Engine (MSE) through 8.0.120.7 uses …
- CVE-2015-4283Cisco Videoscape Policy Resource Manager (PRM) 3.5.4 allows …
- CVE-2015-4284The Concurrent Data Management Replication process in Cisco …
- CVE-2015-4286The web framework in Cisco UCS Central Software 1.3(0.99) al…
- CVE-2015-4287Cisco Firepower Extensible Operating System 1.1(1.86) on Fir…
- CVE-2015-4288The LDAP implementation on the Cisco Web Security Appliance …
- CVE-2015-4289Directory traversal vulnerability in Cisco AnyConnect Secure…
- CVE-2015-4290The kernel extension in Cisco AnyConnect Secure Mobility Cli…
- CVE-2015-4291Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR …
Are you affected by CVE-2015-4285?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST