CVE-2015-4203 describes a race condition in Cisco IOS 12.2SCH on uBR10000 devices, specifically within the Performance Routing Engine (PRE) module when NetFlow and MPLS IPv6 VPN are configured. This vulnerability allows remote attackers to cause a denial of service by sending rapidly malformed MPLS 6VPE packets, leading to a PXF process crash. The CVSS score of 5.4 indicates a medium severity, with a network attack vector and high attack complexity, resulting in a complete availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
12.2\(33\)schCPE matchmatch criteria | cpe:2.3:o:cisco:ios:12.2\(33\)sch:*:*:*:*:*:*:* | ||
12.2schCPE matchmatch criteria | cpe:2.3:o:cisco:ios:12.2sch:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:H/Au:N/C:N/I:N/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.