CVSS 8.8 · High EPSS 1,9%
Kerentanan Improper Input Validation pada cisco firepower extensible operating system, cisco ucs manager +1 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.
A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code as root or cause a denial of service (DoS) condition on an affected device. The vulnerability exists because of insufficiently validated Cisco Discovery Protocol packet headers. An attacker could exploit this vulnerability by sending a crafted Cisco Discovery Protocol packet to a Layer 2-adjacent affected device. A successful exploit could allow the attacker to cause a buffer overflow that could allow the attacker to execute arbitrary code as root or cause a DoS condition on the affected device. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Note: This vulnerability is different from the following Cisco FXOS and NX-OS Software Cisco Discovery Protocol vulnerabilities that Cisco announced on Feb. 5, 2020: Cisco FXOS, IOS XR, and NX-OS Software Cisco Discovery Protocol Denial of Service Vulnerability and Cisco NX-OS Software Cisco Discovery Protocol Remote Code Execution Vulnerability.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| cisco | firepower extensible operating system | Semua versi sebelum 2.6.1.187 |
| cisco | firepower extensible operating system | Versi 2.7 hingga sebelum 2.7.1.106 |
| cisco | ucs manager | Semua versi sebelum 3.2\(3n\) |
| cisco | ucs manager | Versi 4.0 hingga sebelum 4.0\(4g\) |
| cisco | nx-os | Semua versi |
| cisco | nx-os | Versi 5.2(1)sv5(1.2) |
| cisco | nx-os | Versi 7.3(5)n1(1) |
| cisco | nx-os | Versi 7.3(0)d1(0.140) |
| cisco | nx-os | Versi 7.3(0)d1(0.146) |
| cisco | nx-os | Versi 7.0(3)i3(0.191) |
| cisco | nx-os | Versi 13.2(7.230) |
| cisco | nx-os | Versi 14.2(1i) |