PT-2011-1626 · Cisco · Cisco Ios

Vanhauser · Publicado 2011-01-07 · Atualizado 2020-05-08 · CVE-2010-4671

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.0(1)XA5

Description The issue is related to the Neighbor Discovery (ND) protocol implementation in the IPv6 stack, which allows remote attackers to cause a denial of service by sending many Router Advertisement (RA) messages with different source addresses. This can lead to CPU consumption and device hang.

Recommendations For versions prior to 15.0(1)XA5, update to version 15.0(1)XA5 or later to resolve the issue. As a temporary workaround, consider restricting access to the IPv6 network to minimize the risk of exploitation.

Exploit

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2010-4671

Produtos afetados

Cisco Ios

Referências · 8

• 🔥 http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3 · Exploit
• 🔥 http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html · Exploit
• http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4671 · Nota de Segurança
• http://youtube.com/watch?v=00yjWB6gGy8 · Nota
• http://securityfocus.com/bid/45760 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64589 · Nota
• http://ciscosystems.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf · Nota