PT-2016-3711 · Cisco · Cisco Nx-Os+1

Published 2016-10-05 · Updated 2017-07-30 · CVE-2015-6393

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 4.1 through 7.3 Cisco NX-OS versions 11.0 through 11.2

Description A vulnerability in the implementation of the DHCPv4 relay agent could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to improper validation of malformed DHCPv4 packets. An attacker could exploit this by sending malformed DHCPv4 packets to an affected device, potentially causing the DHCP process or device to crash. This can be triggered by malformed DHCP packets processed by a DHCP relay agent listening on the device, using the IPv4 broadcast address or IPv4 unicast address of any interface configured on a device.

Recommendations For Cisco NX-OS versions 4.1 through 7.3, update to a fixed version to address the vulnerability. For Cisco NX-OS versions 11.0 through 11.2, update to a fixed version to address the vulnerability.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-6393

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-6393 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp2 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-dhcp2 · Vendor Advisory
• http://securitytracker.com/id/1036949 · Note
• http://securityfocus.com/bid/93419 · Note