7.4
Élevée
CVE-2019-1617 A vulnerability in the Fibre Channel over Ethernet (FCoE) N-port Virtualization (NPV) protocol implementation in Cisco…
Description
A vulnerability in the Fibre Channel over Ethernet (FCoE) N-port Virtualization (NPV) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to an incorrect processing of FCoE packets when the fcoe-npv feature is uninstalled. An attacker could exploit this vulnerability by sending a stream of FCoE frames from an adjacent host to an affected device. An exploit could allow the attacker to cause packet amplification to occur, resulting in the saturation of interfaces and a DoS condition. Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I7(5) and 9.2(2).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Nexus 9000 Series Switches in Standalone NX-OS Mode | Versions non publiées |
Références
- 20190306 Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service Vulnerability tools.cisco.com
- 107336 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Nexus 9000 Series Switches in Standalone NX-OS Mode
Les 17 CVE de Nexus 9000 Series Switches in Standalone NX-OS Mode →
CVE-2019-1614
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute…
8.8
Élevée
CVE-2019-1611
A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local…
4.2
Moyenne
CVE-2019-1613
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary…
4.2
Moyenne
CVE-2019-1616
A vulnerability in the Cisco Fabric Services component of Cisco NX-OS Software could allow an unauthenticated, remote…
8.6
Élevée