CVE-2015-6256: Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service (OSP...

Security readout for executives and security teams

This CVE describes a denial-of-service issue in Cisco ASR routing equipment. A remote attacker could send malformed OSPF packets that restart the OSPF process, disrupting routing stability. The source bundle does not provide a CVSS score, severity rating, confirmed fix version, or evidence of active exploitation. Exposure is most relevant to organizations operating Cisco ASR 5000 systems with OSPF enabled, especially software 19.0.M0.60828. ASR 5500 may be relevant based on the Cisco advisory title, but affected-version evidence is incomplete in the provided bundle. Treat this as a targeted network-infrastructure availability risk. Prioritize validation if Cisco ASR platforms support critical mobile, carrier, or enterprise routing paths. Urgency is harder to rank because severity, exploit status, and patch details are not included in the provided evidence. Mitigation focus: Review Cisco advisory alert 40585 for fixed releases and vendor workarounds.; Inventory Cisco ASR 5000 and ASR 5500 devices running OSPF.; Identify any ASR 5000 devices on software 19.0.M0.60828..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.