HomePentest-Tools.com Logo

Cisco IOS and IOS XE Software IKEv1 State Machine Denial of Service Vulnerability CVE-2015-6429

Not available
CVSSv3 Score
Not available
Vulnerability description

A vulnerability in the Internet Key Exchange (IKEv1) state machine of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to tear down valid IPsec connections, resulting in a partial denial of service (DoS) condition. The vulnerability is due to insufficient condition checks in the IKEv1 state machine. An attacker could exploit this vulnerability by sending a spoofed, specific IKEv1 packet to an endpoint of an IPsec tunnel. A successful exploit could allow the attacker to tear down IPsec tunnels that terminate on the endpoint, causing a partial DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that mitigate this vulnerability.

Risk description
Not available

See the referenced vendor advisory for a solution.

Not available
Detectable with
Network Scanner
Scan engine
Exploitable with Sniper
CVE Published
Dec 19, 2015
Detection added at
Software Type
Not available
Not available
Not available