PT-2014-5223 · Cisco · Cisco Nx-Os+1

Publicado 2014-08-06 · Atualizado 2017-08-29 · CVE-2014-3330

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.1(2)I2(1)

Description The issue is related to the improper processing of packet-drop policy checks for logged packets, allowing remote attackers to bypass intended access restrictions. This can be achieved by sending a flood of packets that match a policy containing the log keyword. The vulnerability is due to insufficient policy checks for logged packets, which could allow an unauthenticated, remote attacker to bypass access list restrictions for logged traffic. An exploit could allow the attacker to bypass the access control list for a small percentage of packets that would otherwise have been dropped.

Recommendations For Cisco NX-OS version 6.1(2)I2(1), update to a newer version that includes the necessary software updates to fix the vulnerability. As a temporary workaround, consider restricting access to the logging feature to minimize the risk of exploitation. Avoid using the log keyword in access list entries until the issue is resolved.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-3330

Produtos afetados

Cisco Nx-Os

Cisco Nexus

Referências · 7

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3330 · Aviso do Fabricante
• http://securityfocus.com/bid/69057 · Nota
• http://securitytracker.com/id/1030676 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3330 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140806-CVE-2014-3330 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95122 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35181 · Aviso do Fabricante