PT-2019-1576 · Cisco · Cisco Nx-Os+1

Published 2019-03-06 · Updated 2019-10-09 · CVE-2019-1595

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to 7.3(5)N1(1)

Description The issue is related to an incorrect allocation of an internal interface index in the Fibre Channel over Ethernet (FCoE) protocol implementation. This could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device by submitting a crafted FCoE packet that crosses affected interfaces, potentially triggering a packet loop and high throughput on the affected interfaces.

Recommendations For versions prior to 7.3(5)N1(1), update to version 7.3(5)N1(1) or later to resolve the issue. As a temporary workaround, consider restricting access to the affected interfaces to minimize the risk of exploitation. Avoid using crafted FCoE packets that could trigger the vulnerability until the issue is resolved.

Fix

DoS

Weakness Enumeration

CWE-913

Related Identifiers

BDU:2019-01107

CVE-2019-1595

Affected Products

Cisco Nx-Os

Cisco Nexus

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-1595 · Security Note
• https://bdu.fstec.ru/vul/2019-01107 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1595 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nexus-fbr-dos · Vendor Advisory
• http://securityfocus.com/bid/107320 · Note