PT-2015-4785 · Cisco · Cisco Nx-Os+1

Publicado 2015-03-27 · Atualizado 2015-10-22 · CVE-2015-0658

Positive Technologies (AI Summary)

CVSS v2.0

7.9

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco NX-OS (affected versions not specified)

Description The issue is related to the DHCP implementation in the PowerOn Auto Provisioning (POAP) feature, which does not properly restrict the initialization process. This allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network. The vulnerability is due to insufficient input validation of the DHCP options returned as a result of POAP. An attacker could exploit this by responding to the initial DHCP request with crafted DHCP packets, allowing the execution of arbitrary commands in the security context of the root user. The attack can occur during the POAP initialization process and requires the attacker to be on the same broadcast or collision domain as the affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-0658

Produtos afetados

Cisco Nx-Os

Cisco Nexus

Referências · 4

• http://securitytracker.com/id/1031992 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150327-CVE-2015-0658 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0658 · Nota de Segurança
• http://tools.cisco.com/security/center/viewAlert.x?alertId=38062 · Aviso do Fabricante