PT-2015-7251 · Cisco · Cisco Ios Xe

Publicado 2015-12-21 · Atualizado 2016-12-07 · CVE-2015-6431

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 16.1.1

Description The issue is caused by incorrect processing of packets with a source MAC address of 0000:0000:0000, allowing an unauthenticated, adjacent attacker to cause the device to reload by sending a frame with a source MAC address of all zeros.

Recommendations For Cisco IOS XE version 16.1.1, update to a fixed software version to address this issue. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2015-6431

Produtos afetados

Cisco Ios Xe

Referências · 5

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2015-1221-iosxe · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-6431 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2015-1221-iosxe · Aviso do Fabricante
• http://securityfocus.com/bid/79654 · Nota
• http://securitytracker.com/id/1034514 · Nota