PT-2014-5235 · Cisco · Cisco Ios Xr

Publicado 2014-09-09 · Atualizado 2017-08-29 · CVE-2014-3343

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.1

Description A vulnerability in the DHCP version 6 (DHCPv6) code could allow an unauthenticated, remote attacker to cause the DHCPv6 server process on an affected device to crash. The issue is due to incorrect handling of malformed DHCPv6 packets. An attacker could exploit this by sending a malformed DHCPv6 packet to an affected device configured with DHCPv6 server functionality. The attacker may need access to trusted, internal networks behind a firewall to send the packets and may also need to obtain additional information about the device configuration.

Recommendations For Cisco IOS XR version 5.1, update to a fixed software version to resolve the issue. As a temporary workaround, consider restricting access to the DHCPv6 server functionality until a patch is available.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-3343

Produtos afetados

Cisco Ios Xr

Referências · 8

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140909-CVE-2014-3343 · Nota
• http://securityfocus.com/bid/69667 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95781 · Nota
• http://securitytracker.com/id/1030816 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3343 · Nota de Segurança
• http://secunia.com/advisories/60122 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3343 · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35651 · Aviso do Fabricante