CVE-2015-0709: Cisco IOS

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging knowledge of the RADIUS secret and sending crafted RADIUS packets, aka Bug ID CSCur21348.

Affected products

• Cisco IOS: version 15.5(3)s only; version 15.5s only
• Cisco IOS XE: affected versions not specified

Published 2015-04-29. Last modified 2026-06-17.