CVE-2015-0646: Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO,...

Security readout for executives and security teams

CVE-2015-0646 is a Cisco IOS and IOS XE TCP packet handling flaw that can drain memory and force a device reload. In business terms, affected routers or switches could become unavailable if exposed to crafted TCP traffic over IPv4 or IPv6. Exposure is most likely on Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, 15.4, and listed IOS XE 3.x trains, especially devices reachable by untrusted TCP traffic. Prioritize remediation for exposed or critical Cisco network devices because successful exploitation can disrupt routing or switching availability. Lack of KEV evidence lowers urgency slightly, but remote denial-of-service risk remains material. Mitigation focus: Review Cisco advisory cisco-sa-20150325-tcpleak for platform-specific fixed releases.; Upgrade IOS XE 3.10.xS to 3.10.5S or later where applicable.; Upgrade IOS XE 3.12.xS to 3.12.3S or later where applicable..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.