PT-2018-1853 · Cisco · Cisco Nx-Os+1

Published 2018-06-20 · Updated 2019-10-09 · CVE-2018-0291

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to the fixed version

Description A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol data units (PDUs) in SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device. A successful exploit could allow the attacker to cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition.

Recommendations For Cisco NX-OS Software, update to a version that includes the fix for this vulnerability. As a temporary workaround, consider restricting access to the SNMP application to minimize the risk of exploitation. Avoid using the vulnerable SNMP protocol data units (PDUs) in SNMP packets until the issue is resolved.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2018-01455

CVE-2018-0291

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 5

• https://bdu.fstec.ru/vul/2018-01455 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nxossnmp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0291 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0291 · Security Note
• http://securitytracker.com/id/1041169 · Note