CVE-2015-6267: Cisco IOS XE

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496.

Affected products

• Cisco IOS XE: version 2.2.1 only; version 2.2.2 only

Published 2015-08-29. Last modified 2026-06-17.