CVE-2015-4293: The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a d...

Security readout for executives and security teams

CVE-2015-4293 is a denial-of-service issue in Cisco IOS XE packet reassembly. Specially fragmented IPv4 or IPv6 traffic can make affected devices consume CPU or drop packets, potentially degrading network availability rather than exposing data directly. Exposure is most likely on routers or other Cisco IOS XE devices running 3.13S or earlier that receive untrusted fragmented IPv4 or IPv6 traffic. The source bundle does not identify specific platforms, configurations, or fixed versions. Treat this as an availability risk for network infrastructure. Prioritize externally exposed or high-traffic Cisco IOS XE devices, but avoid emergency assumptions because the provided sources do not show active exploitation or a CVSS score. Mitigation focus: Inventory Cisco IOS XE devices and identify versions 3.13S or earlier.; Review Cisco advisory alert 40215 for fixed releases or supported workarounds.; Prioritize internet-edge or untrusted-traffic devices for remediation planning..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.