PT-2017-16124 · Cisco · Cisco Netflow Generation Appliance

Publicado 2017-03-01 · Atualizado 2019-10-03 · CVE-2017-3826

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco NetFlow Generation Appliance versions prior to 1.1(1a)

Description A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder could allow an unauthenticated, remote attacker to cause the device to hang or unexpectedly reload, resulting in a denial of service (DoS) condition. This issue is due to incomplete validation of SCTP packets being monitored on the NGA data ports. An attacker could exploit this by sending malformed SCTP packets on a network monitored by an NGA data port. The vulnerability does not affect SCTP packets addressed to the IP address of the NGA itself. Exploitation could cause the appliance to become unresponsive or reload, leading to a DoS condition, and may require user interaction to recover the device.

Recommendations For versions prior to 1.1(1a), update the software to version 1.1(1a) or later to resolve the issue. As a temporary workaround, consider restricting access to the NGA data ports to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-399

CWE-20

Identificadores relacionados

CVE-2017-3826

Produtos afetados

Cisco Netflow Generation Appliance

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-3826 · Aviso do Fabricante
• http://securityfocus.com/bid/96509 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-3826 · Nota de Segurança
• http://securitytracker.com/id/1037938 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170301-nga · Aviso do Fabricante