PT-2018-3944 · Cisco · Nexus 5500 Platform Switches+18

Published

2018-06-20

·

Updated

2023-04-20

·

CVE-2018-0310

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cisco FXOS Software and Cisco NX-OS Software (affected versions not specified) Firepower 4100 Series Next-Generation Firewalls (affected versions not specified) Firepower 9300 Security Appliance (affected versions not specified) MDS 9000 Series Multilayer Switches (affected versions not specified) Nexus 2000 Series Fabric Extenders (affected versions not specified) Nexus 3000 Series Switches (affected versions not specified) Nexus 3500 Platform Switches (affected versions not specified) Nexus 5500 Platform Switches (affected versions not specified) Nexus 5600 Platform Switches (affected versions not specified) Nexus 6000 Series Switches (affected versions not specified) Nexus 7000 Series Switches (affected versions not specified) Nexus 7700 Series Switches (affected versions not specified) Nexus 9000 Series Switches in standalone NX-OS mode (affected versions not specified) Nexus 9500 R-Series Line Cards and Fabric Modules (affected versions not specified) UCS 6100 Series Fabric Interconnects (affected versions not specified) UCS 6200 Series Fabric Interconnects (affected versions not specified) UCS 6300 Series Fabric Interconnects (affected versions not specified)
Description A vulnerability in the Cisco Fabric Services component could allow an unauthenticated, remote attacker to obtain sensitive information from memory or cause a denial of service (DoS) condition on the affected product. The vulnerability exists because the affected software insufficiently validates header values in Cisco Fabric Services packets. An attacker could exploit this vulnerability by sending a crafted Cisco Fabric Services packet to an affected device. A successful exploit could allow the attacker to cause a buffer overread condition, which could allow the attacker to obtain sensitive information from memory or cause a DoS condition on the affected product.
Recommendations For Cisco FXOS Software and Cisco NX-OS Software, update to a fixed version. For Firepower 4100 Series Next-Generation Firewalls, update to a fixed version. For Firepower 9300 Security Appliance, update to a fixed version. For MDS 9000 Series Multilayer Switches, update to a fixed version. For Nexus 2000 Series Fabric Extenders, update to a fixed version. For Nexus 3000 Series Switches, update to a fixed version. For Nexus 3500 Platform Switches, update to a fixed version. For Nexus 5500 Platform Switches, update to a fixed version. For Nexus 5600 Platform Switches, update to a fixed version. For Nexus 6000 Series Switches, update to a fixed version. For Nexus 7000 Series Switches, update to a fixed version. For Nexus 7700 Series Switches, update to a fixed version. For Nexus 9000 Series Switches in standalone NX-OS mode, update to a fixed version. For Nexus 9500 R-Series Line Cards and Fabric Modules, update to a fixed version. For UCS 6100 Series Fabric Interconnects, update to a fixed version. For UCS 6200 Series Fabric Interconnects, update to a fixed version. For UCS 6300 Series Fabric Interconnects, update to a fixed version.

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-399CWE-125

Related Identifiers

BDU:2023-07230
CVE-2018-0310

Affected Products

Cisco Fxos
Cisco Nx-Os
Cisco Nexus
Firepower 4100 Series Next-Generation Firewalls
Firepower 9300 Security Appliance
Mds 9000 Series Multilayer Switches
Nexus 2000 Series Fabric Extenders
Nexus 3000 Series Switches
Nexus 3500 Platform Switches
Nexus 5500 Platform Switches
Nexus 5600 Platform Switches
Nexus 6000 Series Switches
Nexus 7000 Series Switches
Nexus 7700 Series Switches
Nexus 9000 Series Switches
Nexus 9500 R-Series Line Cards/Fabric Modules
Ucs 6100 Series Fabric Interconnects
Ucs 6200 Series Fabric Interconnects
Ucs 6300 Series Fabric Interconnects