Cisco IOS XE Software 3.9S.2

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:ios_xe:3.9s.2:*:*:*:*:*:*:*

part: o version: 3.9s.2 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductIos Xe (e06dcf6a-4e40-54fa-8931-59bc15e7d5ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-6282 vulnerable 2026-06-08 05:06:51.627125 Details available
Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service (device reload) via IPv4 packets that require NAT and MPLS actions, aka Bug ID CSCut96933.
Published: 2015-09-25T01:00:00.000Z
Updated: 2024-08-06T07:15:13.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6278 vulnerable 2026-06-08 05:06:51.551492 Details available
The IPv6 snooping functionality in the first-hop security subsystem in Cisco IOS 12.2, 15.0, 15.1, 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.2SE, 3.3SE, 3.3XO, 3.4SG, 3.5E, and 3.6E before 3.6.3E; 3.7E before 3.7.2E; 3.9S and 3.10S before 3.10.6S; 3.11S before 3.11.4S; 3.12S and 3.13S before 3.13.3S; and 3.14S before 3.14.2S does not properly implement the Control Plane Protection (aka CPPr) feature, which allows remote attackers to cause a denial of service (device reload) via a flood of ND packets, aka Bug ID CSCus19794.
Published: 2015-09-28T01:00:00.000Z
Updated: 2024-08-06T07:15:13.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0650 vulnerable 2026-06-08 05:06:22.097113 Details available
The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) by sending malformed mDNS UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCup70579.
Published: 2015-03-26T10:00:00.000Z
Updated: 2024-08-06T04:17:32.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0646 vulnerable 2026-06-08 05:06:22.045713 Details available
Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted TCP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum94811.
Published: 2015-03-26T10:00:00.000Z
Updated: 2024-08-06T04:17:32.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0644 vulnerable 2026-06-08 05:06:22.043476 Details available
AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.
Published: 2015-03-26T10:00:00.000Z
Updated: 2024-08-06T04:17:32.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0643 vulnerable 2026-06-08 05:06:22.042495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0642 vulnerable 2026-06-08 05:06:22.033565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0640 vulnerable 2026-06-08 05:06:22.004424 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.