PT-2016-1515 · Cisco · Cisco Nx-Os+1

Published 2016-03-02 · Updated 2016-12-03 · CVE-2015-6260

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices

Description The issue exists due to insufficient validation of PDU fragments in SNMP packets. This allows a remote attacker to cause a denial of service (SNMP application restart) by sending a specially crafted packet. An attacker could exploit this by sending a crafted SNMP packet, causing the SNMP application to restart, potentially leading to a system-level restart and a denial of service condition.

Recommendations For Cisco NX-OS version 7.1(1)N1(1), update to a newer version that includes the fix for this issue, as software updates have been released by Cisco to address this vulnerability. At the moment, there is no information about other versions that contain a fix for this vulnerability.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2016-00816

CVE-2015-6260

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 5

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n5ksnmp · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-n5ksnmp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6260 · Security Note
• https://bdu.fstec.ru/vul/2016-00816 · Security Note
• http://securitytracker.com/id/1035158 · Note