PT-2018-1853 · Cisco · Cisco Nx-Os+1

Publicado 2018-06-20 · Atualizado 2019-10-09 · CVE-2018-0291

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to the fixed version

Description A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol data units (PDUs) in SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device. A successful exploit could allow the attacker to cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition.

Recommendations For Cisco NX-OS Software, update to a version that includes the fix for this vulnerability. As a temporary workaround, consider restricting access to the SNMP application to minimize the risk of exploitation. Avoid using the vulnerable SNMP protocol data units (PDUs) in SNMP packets until the issue is resolved.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2018-01455

CVE-2018-0291

Produtos afetados

Cisco Nx-Os

Cisco Nexus

Referências · 5

• https://bdu.fstec.ru/vul/2018-01455 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nxossnmp · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-0291 · Aviso do Fabricante
• http://securitytracker.com/id/1041169 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0291 · Nota de Segurança