CVE-2015-0586: Cisco IOS

High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days.

The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Services Router (aka Cisco Internet Router) devices allows remote attackers to cause a denial of service (NBAR process hang) via IPv4 packets, aka Bug ID CSCuo73682.

Affected products

• Cisco IOS: up to and including 15.3\(100\)m

Published 2015-01-28. Last modified 2026-06-17.