PT-2014-5190 · Cisco · Cisco Nx-Os+1

Published 2014-06-11 · Updated 2016-09-08 · CVE-2014-3295

Positive Technologies (AI Summary)

CVSS v2.0

4.8

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.2(2a) and earlier

Description The issue allows remote attackers to bypass authentication and cause a denial of service, including group-member state modification and traffic blackholing, via malformed HSRP packets. This is due to incorrect parsing of malformed HSRP packets. An attacker could exploit this by sending malformed packets to bypass HSRP authentication, affecting the state of active HSRP group members and causing them to go to SPEAK state, which leads to black holing of traffic and a denial of service condition. Although an attacker does not need to authenticate to a targeted device to exploit this, they must be on the same collision or broadcast domain of the targeted device.

Recommendations For Cisco NX-OS version 6.2(2a) and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the HSRP protocol to minimize the risk of exploitation.

DoS

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2014-3295

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 7

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3295 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34585 · Vendor Advisory
• http://securityfocus.com/bid/67983 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140611-CVE-2014-3295 · Note
• http://securitytracker.com/id/1030409 · Note
• http://secunia.com/advisories/59158 · Note