PT-2017-16109 · Cisco · Cisco Nexus 5000 Series Switches+3

Published 2017-01-18 · Updated 2019-10-03 · CVE-2017-3804

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Nexus 5000, 6000, and 7000 Series Switches versions 7.1(3)N1(2.1) through 7.1(3)N1(3.12) Cisco Nexus 5000, 6000, and 7000 Series Switches version 7.3(2)N1(0.296) Cisco Nexus 5000, 6000, and 7000 Series Switches version 8.0(1)S2

Description A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. The vulnerability is due to improper processing of crafted IS-IS protocol packets. An attacker could exploit this vulnerability by sending a crafted IS-IS protocol packet over an established adjacency.

Recommendations For Cisco Nexus 5000, 6000, and 7000 Series Switches versions 7.1(3)N1(2.1) through 7.1(3)N1(3.12), update to version 7.1(4)N1(0.4) or later. For Cisco Nexus 5000, 6000, and 7000 Series Switches version 7.3(2)N1(0.296), update to version 7.3(2)N1(0.304) or later. For Cisco Nexus 5000, 6000, and 7000 Series Switches version 8.0(1)S2, update to version 8.0(1) or later.

Fix

Related Identifiers

CVE-2017-3804

Affected Products

Cisco Nexus

Cisco Nexus 5000 Series Switches

Cisco Nexus 6000 Series Switches

Cisco Nexus 7000 Series Switches

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-nexus · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-3804 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3804 · Security Note
• http://securityfocus.com/bid/95638 · Note
• http://securitytracker.com/id/1037658 · Note