PT-2018-8604 · Cisco · Cisco Ucs Central

Publicado 2018-01-18 · Atualizado 2019-10-09 · CVE-2018-0094

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco UCS Central Software (affected versions not specified)

Description: A vulnerability in IPv6 ingress packet processing could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The issue is due to insufficient rate limiting protection for IPv6 ingress traffic. An attacker could exploit this by sending a high rate of IPv6 packets, potentially causing a DoS condition due to CPU and resource constraints.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-400

CWE-693

Identificadores relacionados

CVE-2018-0094

Produtos afetados

Cisco Ucs Central

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-0094 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-0094 · Aviso do Fabricante
• http://securityfocus.com/bid/102787 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-ucs · Aviso do Fabricante
• http://securitytracker.com/id/1040249 · Nota