PT-2019-1576 · Cisco · Cisco Nx-Os+1

Publicado 2019-03-06 · Atualizado 2019-10-09 · CVE-2019-1595

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to 7.3(5)N1(1)

Description The issue is related to an incorrect allocation of an internal interface index in the Fibre Channel over Ethernet (FCoE) protocol implementation. This could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device by submitting a crafted FCoE packet that crosses affected interfaces, potentially triggering a packet loop and high throughput on the affected interfaces.

Recommendations For versions prior to 7.3(5)N1(1), update to version 7.3(5)N1(1) or later to resolve the issue. As a temporary workaround, consider restricting access to the affected interfaces to minimize the risk of exploitation. Avoid using crafted FCoE packets that could trigger the vulnerability until the issue is resolved.

Correção

DoS

Enumeração de Fraquezas

CWE-913

Identificadores relacionados

BDU:2019-01107

CVE-2019-1595

Produtos afetados

Cisco Nx-Os

Cisco Nexus

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-1595 · Nota de Segurança
• http://securityfocus.com/bid/107320 · Nota
• https://bdu.fstec.ru/vul/2019-01107 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1595 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nexus-fbr-dos · Aviso do Fabricante