A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to exhaust process memory of an affected device. The vulnerability is due to insufficient queue management for Internet Group Management Protocol (IGMP) packets. An attacker could exploit this vulnerability by sending crafted IGMP traffic to an affected device. A successful exploit could allow the attacker to cause memory exhaustion, resulting in instability of other processes. These processes may include, but are not limited to, interior and exterior routing protocols. Cisco will release software updates that address this vulnerability.

Threat-Mapped Scoring

Score: 1.5

Priority: P4 - Informational (Low)

• S10 – Denial of Service

EPSS

Score: 0.18957
Percentile: 0.95028

CVSS Scoring

KEV is present

Mapped CWE(s)

• CWE-400 : Uncontrolled Resource Consumption
• CWE-770 : Allocation of Resources Without Limits or Throttling

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1498.001 : Direct Network Flood
  Kill Chain: impact
• T1499 : Endpoint Denial of Service
  Kill Chain: impact
• T1499.003 : Application Exhaustion Flood
  Kill Chain: impact
• T1499 : Endpoint Denial of Service
  Kill Chain: impact
• T1499.002 : Service Exhaustion Flood
  Kill Chain: impact
• T1498.001 : Direct Network Flood
  Kill Chain: impact
• T1499.001 : OS Exhaustion Flood
  Kill Chain: impact
• T1499.002 : Service Exhaustion Flood
  Kill Chain: impact
• T1499.002 : Service Exhaustion Flood
  Kill Chain: impact
• T1499.002 : Service Exhaustion Flood
  Kill Chain: impact
• T1498.002 : Reflection Amplification
  Kill Chain: impact
• T1499.002 : Service Exhaustion Flood
  Kill Chain: impact
• T1498.001 : Direct Network Flood
  Kill Chain: impact

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:o:cisco:ios_xr:6.4.2:*:*:*:*:*:*:*

← Back to Home