ID

VAR-201302-0384

CVE

CVE-2013-1122

TITLE

Cisco Nexus 7000 Run on Cisco NX-OS Service disruption in (DoS) Vulnerabilities

DESCRIPTION

Cisco NX-OS on the Nexus 7000, when a certain Overlay Transport Virtualization (OTV) configuration is used, allows remote attackers to cause a denial of service (M1-Series module reload) via crafted packets, aka Bug ID CSCud15673. The Cisco Nexus Series switches are data center switches. Adopt the Cisco Nexus OS operating system. The Cisco Nexus 7000 does not properly handle specially crafted messages, allowing unauthenticated authentication attackers to submit specially crafted messages to devices configured with OTV (whose physical interfaces are connected through M1 series modules), which can overload M1 series modules. Successfully exploiting this issue allows remote attackers to cause denial-of-service conditions. This issue is being tracked by Cisco Bug ID CSCud15673. Cisco NX-OS 6.1 (0.208)S0 and prior are vulnerable. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: Cisco Nexus 7000 Series M1-Series Module Denial of Service Vulnerability SECUNIA ADVISORY ID: SA52090 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/52090/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=52090 RELEASE DATE: 2013-02-07 DISCUSS ADVISORY: http://secunia.com/advisories/52090/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/52090/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=52090 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: A vulnerability has been reported in Cisco Nexus 7000 M1-Series Modules, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error when handling certain packets and can be exploited to cause the module to reload by sending specially crafted packets. Successful exploitation requires the device to be configured with Overlay Transport Virtualization (OTV), where the physical interface of the connection is over the M1-Series module. Please see the vendor's advisory for details. SOLUTION: No official solution is currently available. PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: Cisco (CSCud15673): http://tools.cisco.com/security/center/viewAlert.x?alertId=28116 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1122 http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCud15673 OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

IOT TAXONOMY

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

THREAT TYPE

remote

TYPE

input validation

CONFIGURATIONS

PATCH

EXTERNAL IDS

REFERENCES

CREDITS

The vendor reported this issue.

SOURCES

LAST UPDATE DATE

2024-11-23T22:49:35.367000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE