PT-2012-1681 · Cisco · Cisco Carrier Routing System

Publicado 2012-05-02 · Atualizado 2017-12-07 · CVE-2011-3283

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Carrier Routing System version 3.9.1

Description The issue allows remote attackers to cause a denial of service, resulting in a Metro subsystem crash. This can be achieved by sending a fragmented GRE packet.

Recommendations For Cisco Carrier Routing System version 3.9.1, consider implementing packet filtering to block fragmented GRE packets as a temporary workaround until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-3283

Produtos afetados

Cisco Carrier Routing System

Referências · 4

• http://securitytracker.com/id?1027006 · Nota
• http://cisco.com/cisco/software/release.html?mdfid=280777815&softwareid=280867577&release=3.9.1 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2011-3283 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75341 · Nota