PT-2014-3780 · Cisco · Cisco Nexus 1000V Intercloud+1

Published 2014-05-06 · Updated 2014-05-07 · CVE-2014-0685

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V InterCloud versions 5.2(1)IC1(1.2) and earlier

Description A remote attacker can bypass ACL deny statements via crafted IGMPv2 or IGMPv3 packets. The issue is due to a lack of IGMPv2 and IGMPv3 support in ACLs. An attacker could exploit this by sending certain IGMPv2 or IGMPv3 requests to an affected switch. The vulnerability does not affect IGMP version 1. To exploit this, an attacker may need access to trusted, internal networks to send IGMPv2 or IGMPv3 requests to a targeted device.

Recommendations For Cisco Nexus 1000V InterCloud versions 5.2(1)IC1(1.2) and earlier, update to a newer version that includes the fix for this issue. As a temporary workaround, consider restricting access to the switch to minimize the risk of exploitation. Avoid using IGMPv2 and IGMPv3 protocols until the issue is resolved.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-0685

Affected Products

Cisco Nexus

Cisco Nexus 1000V Intercloud

References · 4

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0685 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0685 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34130 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140506-CVE-2014-0685 · Note