VYPR
← All advisories
High severity7.5NVD Advisory· Published Jan 5, 2016· Updated Jun 17, 2026

CVE-2015-6432

CVE-2015-6432

Description

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service (device reload) via a crafted update, aka Bug ID CSCuw83486.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Cisco Systems, Inc./iOS Xr10 versions
    cpe:2.3:o:cisco:ios_xr:4.2.0:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:o:cisco:ios_xr:4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.2.4:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.3.2:*:*:*:*:*:*:*
    • (no CPE)range: 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, 5.3.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.