PT-2016-1515 · Cisco · Cisco Nx-Os+1

Publicado 2016-03-02 · Atualizado 2016-12-03 · CVE-2015-6260

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices

Description The issue exists due to insufficient validation of PDU fragments in SNMP packets. This allows a remote attacker to cause a denial of service (SNMP application restart) by sending a specially crafted packet. An attacker could exploit this by sending a crafted SNMP packet, causing the SNMP application to restart, potentially leading to a system-level restart and a denial of service condition.

Recommendations For Cisco NX-OS version 7.1(1)N1(1), update to a newer version that includes the fix for this issue, as software updates have been released by Cisco to address this vulnerability. At the moment, there is no information about other versions that contain a fix for this vulnerability.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2016-00816

CVE-2015-6260

Produtos afetados

Cisco Nx-Os

Cisco Nexus

Referências · 5

• http://securitytracker.com/id/1035158 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n5ksnmp · Aviso do Fabricante
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n5ksnmp · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-6260 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-00816 · Nota de Segurança