Wednesday, January 18, 2017

Cisco Nexus 5000, 6000, and 7000 Series Switches Software IS-IS Packet Processing Denial of Service Vulnerability

A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device.

The vulnerability is due to improper processing of crafted IS-IS protocol packets. An attacker could exploit this vulnerability by sending a crafted IS-IS protocol packet over an established adjacency. An exploit could allow the attacker to cause a reload of the affected device.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
http://ift.tt/2jZY7BQ A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device.

The vulnerability is due to improper processing of crafted IS-IS protocol packets. An attacker could exploit this vulnerability by sending a crafted IS-IS protocol packet over an established adjacency. An exploit could allow the attacker to cause a reload of the affected device.

There are no workarounds that address this vulnerability.

This advisory is available at the following link:
http://ift.tt/2jZY7BQ
Security Impact Rating: Medium
CVE: CVE-2017-3804

from Cisco Security Advisory http://ift.tt/2jZY7BQ

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.