CVE-2015-0648: Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of serv...

Security readout for executives and security teams

This CVE describes a Cisco IOS memory leak triggered by crafted Common Industrial Protocol TCP packets. A remote attacker could consume device memory and cause a denial of service. The source bundle does not provide CVSS, detailed affected products, or confirmed fixes. Exposure is most likely on Cisco IOS devices in the listed release trains where CIP TCP traffic can reach the device. Industrial or OT-adjacent networks using CIP should be reviewed first. The source bundle lacks exact product models or configuration prerequisites. Prioritize exposed industrial or network infrastructure devices because impact is availability, not data theft. Treat internet-reachable or cross-zone CIP access as higher urgency. Patch planning should follow Cisco guidance because the bundle does not name a specific fixed version. Mitigation focus: Review Cisco advisory cisco-sa-20150325-cip for official fixed releases and workarounds.; Inventory Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 devices.; Reduce untrusted access to CIP TCP where operationally feasible..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.