PT-2014-5267 · Cisco · Cisco Ios Xr

Publicado 2014-09-19 · Atualizado 2017-08-29 · CVE-2014-3377

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier

Description A vulnerability in the Simple Network Management Protocol (SNMP) version 2 processing of Cisco IOS XR allows an authenticated, remote attacker to cause a reload of the SNMP daemon (snmpd) process on an affected device. This is due to improper parsing of a malformed SNMPv2 packet. To exploit this vulnerability, an attacker must authenticate to the targeted device and may need to obtain additional information, such as whether the device has SNMP configured.

Recommendations For Cisco IOS XR versions 5.1 and earlier, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-3377

Produtos afetados

Cisco Ios Xr

Referências · 8

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140919-CVE-2014-3377 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3377 · Nota de Segurança
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35774 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96066 · Nota
• http://secunia.com/advisories/59606 · Nota
• http://securityfocus.com/bid/69959 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3377 · Aviso do Fabricante
• http://securitytracker.com/id/1030878 · Nota