PT-2016-3710 · Cisco · Cisco Nx-Os+1

Published 2016-10-05 · Updated 2017-07-30 · CVE-2015-6392

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.1 through 7.3 Cisco NX-OS versions 11.0 through 11.2

Description A vulnerability in the implementation of the DHCPv4 relay agent and smart relay agent could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to improper validation of crafted DHCPv4 offer packets. An attacker could exploit this by sending crafted DHCPv4 offer packets to an affected device, potentially causing the DHCP process or device to crash. This can be triggered by crafted DHCP packets processed by a DHCP relay agent or smart relay agent listening on the device using the IPv4 broadcast address or the IPv4 unicast address of any interface configured on a device.

Recommendations For Cisco NX-OS versions 4.1 through 7.3, update to a fixed version of the software. For Cisco NX-OS versions 11.0 through 11.2, update to a fixed version of the software. As a temporary workaround, consider restricting access to the DHCP relay agent and smart relay agent to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-6392

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 5

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp1 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6392 · Security Note
• http://securitytracker.com/id/1036948 · Note
• http://securityfocus.com/bid/93406 · Note