CVE-2015-4277: The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly...

Security readout for executives and security teams

CVE-2015-4277 is a denial-of-service issue in Cisco ASR 9000 routers running software 5.1.3 or 5.3.0. A local user can trigger resource consumption that may hang the device. The main business concern is router availability, especially where these platforms carry aggregation or provider-edge traffic. Exposure appears limited to Cisco ASR 9000 devices on software 5.1.3 or 5.3.0, and to users with local access. Organizations without those platforms or versions are unlikely to be affected based on the provided sources. Handle during network infrastructure risk review, with higher urgency for critical aggregation routers. The issue is not documented here as remotely exploitable, but a device hang on core routing equipment can still create material outage risk. Mitigation focus: Check Cisco advisory 39939 for fixed releases or vendor workarounds.; Restrict local and administrative access to ASR 9000 devices.; Review AAA controls for users allowed to enter configuration mode..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.