The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S does not properly implement the Control Plane Protection (aka CPPr) feature, which allows remote attackers to cause a denial of service (device reload) via a flood of ND packets, aka Bug ID CSCus19794.
                
            Metrics
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Complete
This CVE is not in the KEV list.
Key SSVC decision points have not yet been added.
Affected Vendors & Products
| Vendors | Products | 
|---|---|
| Cisco | 
 | 
Configuration 1 [-]
| 
 | 
No data.
References
        History
                    No history.
 MITRE
                        MITRE
                    Status: PUBLISHED
Assigner: cisco
Published: 2015-09-28T01:00:00
Updated: 2024-08-06T07:15:13.296Z
Reserved: 2015-08-17T00:00:00
Link: CVE-2015-6278
 Vulnrichment
                        Vulnrichment
                    No data.
 NVD
                        NVD
                    Status : Deferred
Published: 2015-09-28T02:59:09.887
Modified: 2025-04-12T10:46:40.837
Link: CVE-2015-6278
 Redhat
                        Redhat
                    No data.