CVE-2015-0641 describes a denial-of-service vulnerability affecting Cisco IOS XE versions 2.x and 3.x, allowing remote attackers to trigger a device reload via specially crafted IPv6 packets. With a CVSS score of 7.8, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and complete availability impact. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Despite its age, the vulnerability has garnered minimal community discussion and media coverage, with only one article from SecurityWeek.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.1s.0CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:3.1s.0:*:*:*:*:*:*:* | ||
3.1s.1CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:3.1s.1:*:*:*:*:*:*:* | ||
3.1s.2CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:3.1s.2:*:*:*:*:*:*:* | ||
3.1s.3CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:3.1s.3:*:*:*:*:*:*:* | ||
3.1s.4CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:3.1s.4:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.