CVE-2015-0592: Cisco IOS

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers incorrect kernel-timer handling, aka Bug ID CSCuh25672.

Affected products

• Cisco IOS: up to and including 15.4\(2\)t3; version 15.4(1)t only; version 15.4(1)t1 only; version 15.4(1)t2 only; version 15.4(1)t3 only; version 15.4(1)t4 only; …

Published 2015-02-12. Last modified 2026-06-17.