PT-2018-8734 · Cisco · Cisco Nx-Os+1

Published 2018-06-20 · Updated 2019-10-09 · CVE-2018-0295

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software (affected versions not specified)

Description: A vulnerability in the Border Gateway Protocol (BGP) implementation could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP update messages. An attacker could exploit this vulnerability by sending a crafted BGP update message to the targeted device. The Cisco implementation of the BGP protocol only accepts incoming BGP traffic from explicitly defined peers. To exploit this vulnerability, an attacker must be able to send the malicious packets over a TCP connection that appears to come from a trusted BGP peer or inject malformed messages into the victim's BGP network. This would require obtaining information about the BGP peers in the affected system's trusted network. The vulnerability may be triggered when the router receives a malformed BGP message from a peer on an existing BGP session. At least one BGP neighbor session must be established for a router to be vulnerable.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-0295

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 4

• https://osv.dev/vulnerability/CVE-2018-0295 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0295 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nxosbgp · Vendor Advisory
• http://securitytracker.com/id/1041169 · Note