PT-2018-1743 · Cisco · Cisco Nx-Os+2

Published 2018-10-17 · Updated 2023-04-20 · CVE-2018-0395

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco FXOS Software (affected versions not specified) Cisco NX-OS Software (affected versions not specified)

Description A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when the device unexpectedly reloads. The issue is due to improper input validation of certain type, length, value (TLV) fields of the LLDP frame header. An attacker could exploit this by sending a crafted LLDP packet to an interface on the targeted device, potentially causing the switch to reload unexpectedly.

Recommendations For Cisco FXOS Software, update to a version that includes the fix for this issue. For Cisco NX-OS Software, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the LLDP protocol on affected devices until a patch is available.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2018-01343

CVE-2018-0395

Affected Products

Cisco Fxos

Cisco Nx-Os

Cisco Nexus

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2018-0395 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-fxnx-os-dos · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0395 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01343 · Security Note
• https://t.me/cvenotify/48739 · Telegram Post
• http://securityfocus.com/bid/105674 · Note
• http://securitytracker.com/id/1041919 · Note