CVE-2015-0712: Cisco Staros

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and packet loss) via malformed HTTP packets, aka Bug ID CSCud14217.

Affected products

• Cisco Staros: version 12.0 only; version 12.2(300) only; version 14.0 only; version 14.0(600) only

Published 2015-05-01. Last modified 2026-06-17.