PT-2015-4809 · Cisco · Cisco Nx-Os+1

Publicado 2015-04-02 · Atualizado 2015-09-29 · CVE-2015-0686

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.1(2)I2(3)

Description A vulnerability in the SNMP subsystem could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The issue occurs when the High Availability (HA) policy is set to Reset. An attacker must authenticate to the targeted device to exploit this vulnerability, which causes the device to reload unexpectedly. This vulnerability affects devices running Cisco Nexus 9000 Series platforms.

Recommendations For Cisco NX-OS version 6.1(2)I2(3), update to a newer version that includes the fix for this issue, as confirmed by Cisco. As a temporary workaround, consider restricting access to the SNMP subsystem or disabling the Reset High Availability (HA) policy to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-0686

Produtos afetados

Cisco Nx-Os

Cisco Nexus

Referências · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150402-CVE-2015-0686 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0686 · Nota de Segurança
• http://securitytracker.com/id/1032021 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=38193 · Aviso do Fabricante