PT-2018-8604 · Cisco · Cisco Ucs Central

Published 2018-01-18 · Updated 2019-10-09 · CVE-2018-0094

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco UCS Central Software (affected versions not specified)

Description: A vulnerability in IPv6 ingress packet processing could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The issue is due to insufficient rate limiting protection for IPv6 ingress traffic. An attacker could exploit this by sending a high rate of IPv6 packets, potentially causing a DoS condition due to CPU and resource constraints.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Protection Mechanism Failure

Weakness Enumeration

CWE-400

CWE-693

Related Identifiers

CVE-2018-0094

Affected Products

Cisco Ucs Central

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-0094 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0094 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-ucs · Vendor Advisory
• http://securityfocus.com/bid/102787 · Note
• http://securitytracker.com/id/1040249 · Note