PT-2015-4810 · Cisco · Cisco Ios

Publicado 2015-04-02 · Atualizado 2015-09-29 · CVE-2015-0687

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1(2)SG4

Description A denial of service issue exists due to an unspecified condition during SNMP polling of an affected device configured for Virtual Switching System (VSS) with only one switch in the VSS cluster. This allows an authenticated, remote attacker to cause the device to crash. The attacker must authenticate to the targeted device to exploit this issue.

Recommendations For Cisco IOS version 15.1(2)SG4, update to a newer version that includes the fix for this issue, as confirmed by Cisco. As a temporary workaround, consider restricting access to SNMP polling on affected devices configured for VSS with only one switch in the VSS cluster until a patch is available.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-0687

Produtos afetados

Cisco Ios

Referências · 4

• http://securitytracker.com/id/1032022 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150402-CVE-2015-0687 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=38194 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0687 · Nota de Segurança