Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.1

Cisco IOS and IOS XE TFTP server can crash

CVE-2015-0681 · published 11 years ago
Summary

The built‑in TFTP service in certain Cisco IOS and IOS XE versions may stop responding or cause the device to reboot when it receives a series of specially crafted requests. This can lead to a denial of service, interrupting network operations. Update the software to a version that includes the fix or disable the TFTP server if it is not needed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco ios 12.2\(33\)xn1
12.2\(44\)sq1
12.4\(23\)jy
12.4\(25e\)jam1
12.4\(25e\)jao5m
15.0\(2\)ed1
15.0\(2\)ey3
15.1\(3\)svf4a
15.2\(2\)jb1
cpe:2.3:o:cisco:ios:12.2\(33\)xn1:*:*:*:*:*:*:*
cisco ios_xe 2.5.0
2.5.1
2.5.2
2.6.0
2.6.1
2.6.2
3.1s.0
3.1s.1
3.1s.2
3.1s.3
3.1s.4
3.1s.5
41 more version ranges
cpe:2.3:o:cisco:ios_xe:2.5.0:*:*:*:*:*:*:*
Original advisory text
The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.x...
The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO before 3.3.0XO; 3.2.xSQ; 3.3.xSQ; and 3.4.xSQ allows remote attackers to cause a denial of service (device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSCts66733.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.1 High
Exploitation
2% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published24 Jul 2015
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2015-0681 · NVD
Track software like this
Free during beta