PT-2015-4785 · Cisco · Cisco Nx-Os+1

Published 2015-03-27 · Updated 2015-10-22 · CVE-2015-0658

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco NX-OS (affected versions not specified)

Description The issue is related to the DHCP implementation in the PowerOn Auto Provisioning (POAP) feature, which does not properly restrict the initialization process. This allows remote attackers to execute arbitrary commands as root by sending crafted response packets on the local network. The vulnerability is due to insufficient input validation of the DHCP options returned as a result of POAP. An attacker could exploit this by responding to the initial DHCP request with crafted DHCP packets, allowing the execution of arbitrary commands in the security context of the root user. The attack can occur during the POAP initialization process and requires the attacker to be on the same broadcast or collision domain as the affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-0658

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-0658 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=38062 · Vendor Advisory
• http://securitytracker.com/id/1031992 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150327-CVE-2015-0658 · Note