CVE-2015-6268: Cisco IOS XE

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482.

Affected products

• Cisco IOS XE: version 2.2.1 only; version 2.2.2 only

Published 2015-08-29. Last modified 2026-06-17.