PT-2011-1626 · Cisco · Cisco Ios

Vanhauser · Published 2011-01-07 · Updated 2020-05-08 · CVE-2010-4671

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.0(1)XA5

Description The issue is related to the Neighbor Discovery (ND) protocol implementation in the IPv6 stack, which allows remote attackers to cause a denial of service by sending many Router Advertisement (RA) messages with different source addresses. This can lead to CPU consumption and device hang.

Recommendations For versions prior to 15.0(1)XA5, update to version 15.0(1)XA5 or later to resolve the issue. As a temporary workaround, consider restricting access to the IPv6 network to minimize the risk of exploitation.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2010-4671

Affected Products

Cisco Ios

References · 8

• 🔥 http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3 · Exploit
• 🔥 http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4671 · Security Note
• http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4 · Note
• http://youtube.com/watch?v=00yjWB6gGy8 · Note
• http://securityfocus.com/bid/45760 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64589 · Note
• http://ciscosystems.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf · Note