Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum36951.

Devices running Cisco IOS Software or IOS XE Software contain vulnerabilities within the Internet Key Exchange (IKE) version 2 subsystem that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerabilities are due to how an affected device processes certain malformed IKEv2 packets. An attacker could exploit these vulnerabilities by sending malformed IKEv2 packets to an affected device to be processed. A successful exploit could allow the attacker to cause a reload of the affected device or excessive consumption of resources that would lead to a DoS condition. IKEv2 is automatically enabled on devices running Cisco IOS and Cisco IOS XE Software when the Internet Security Association and Key Management Protocol (ISAKMP) is enabled. These vulnerabilities can only be triggered by sending malformed IKEv2 packets. 

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

A vulnerability in the Cisco IOS and IOS XE could allow an attacker perform a man-in-the-middle attack, create denial of service condition, or remotely execute arbitrary code.

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 2 (IKEv2) subsystem due to improper handling of specially crafted IKEv2 packets. A remote, unauthenticated attacker can exploit this issue to cause a device reload or exhaust memory resources.

Note that this issue only affects devices with IKEv1 or ISAKMP enabled.

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 2 (IKEv2) subsystem due to improper handling of specially crafted IKEv2 packets. A remote, unauthenticated attacker can exploit this issue to cause a device reload or exhaust memory resources.

Note that this issue only affects devices with IKEv1 or ISAKMP enabled.

ID	Name	Product	Family	Severity
501820	Rockwell Automation Stratix 5900 (CVE-2015-0642)	Tenable OT Security	Tenable.ot	high
720283	Rockwell Automation Stratix 5900 Services Router < 15.6.3 Improper Input Validation, Authentication and Path Traversal (ICSA-17-094-04)	Nessus Network Monitor	SCADA	high
82575	Cisco IOS XE IKEv2 DoS (cisco-sa-20150325-ikev2)	Nessus	CISCO	high
82574	Cisco IOS IKEv2 DoS (cisco-sa-20150325-ikev2)	Nessus	CISCO	high

Detections

Analytics

CVE-2015-0642

high

Tenable Plugins

high

high

high

high