GCVE - cpe:2.3:o:cisco:ios_xe:3.11s.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:ios_xe:3.11s.3:*:*:*:*:*:*:*

part: o version: 3.11s.3 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Ios Xe (`e06dcf6a-4e40-54fa-8931-59bc15e7d5ed`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-6282`	vulnerable	2026-06-08 05:06:51.627333	Details available Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service (device reload) via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933. Published: 2015-09-25T01:00:00.000Z Updated: 2024-08-06T07:15:13.311Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-iosxe http://www.securitytracker.com/id/1033645	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6280`	vulnerable	2026-06-08 05:06:51.596938	Details available The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote attackers to obtain login access by leveraging knowledge of a username and the associated public key, aka Bug ID CSCus73013. Published: 2015-09-28T01:00:00.000Z Updated: 2024-08-06T07:15:13.306Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1033646 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-sshpk http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-sshpk/cvrf/cisco-sa-20150923-sshpk_cvrf.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6279`	vulnerable	2026-06-08 05:06:51.577070	Details available The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S allows remote attackers to cause a denial of service (device reload) via a malformed ND packet with the Cryptographically Generated Address (CGA) option, aka Bug ID CSCuo04400. Published: 2015-09-28T01:00:00.000Z Updated: 2024-08-06T07:15:13.316Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs/cvrf/cisco-sa-20150923-fhs_cvrf.xml http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs http://www.securitytracker.com/id/1033647	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6278`	vulnerable	2026-06-08 05:06:51.557662	Details available The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S does not properly implement the Control Plane Protection (aka CPPr) feature, which allows remote attackers to cause a denial of service (device reload) via a flood of ND packets, aka Bug ID CSCus19794. Published: 2015-09-28T01:00:00.000Z Updated: 2024-08-06T07:15:13.296Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs/cvrf/cisco-sa-20150923-fhs_cvrf.xml http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-fhs http://www.securitytracker.com/id/1033647	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0646`	vulnerable	2026-06-08 05:06:22.045947	Details available Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted TCP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum94811. Published: 2015-03-26T10:00:00.000Z Updated: 2024-08-06T04:17:32.508Z Open on db.gcve.eu Reference links http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-tcpleak http://www.securityfocus.com/bid/73340 http://www.securitytracker.com/id/1031980	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0642`	vulnerable	2026-06-08 05:06:22.033760	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0637`	vulnerable	2026-06-08 05:06:21.958345	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0635`	vulnerable	2026-06-08 05:06:21.937687	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.