Details of VAR-201405-0170

ID

VAR-201405-0170

CVE

CVE-2014-0684

TITLE

Cisco Nexus 7000 Runs on the switch Cisco NX-OS Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-002406

DESCRIPTION

Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136. Cisco Nexus 7000 Runs on the switch Cisco NX-OS There is a service disruption (DoS) There are vulnerabilities that are put into a state. Successfully exploiting this issue allows attackers to cause denial-of-service conditions. This issue is being tracked by Cisco Bug ID CSCui56136

Trust: 1.98

sources: NVD: CVE-2014-0684 // JVNDB: JVNDB-2014-002406 // BID: 67214 // VULHUB: VHN-68177

AFFECTED PRODUCTS

vendor:	cisco	model:	nx-os	scope:	eq	version:	6.2\(2\)	Trust: 1.6
vendor:	cisco	model:	nexus 7000	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	nexus 7000 10-slot	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	nexus 7000 18-slot	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	nexus 7000 9-slot	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	nexus 7000 10 slot switch	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nexus 7000 18 slot switch	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nexus 7000 9 slot switch	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nexus 7000 series switch	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nx-os	scope:	eq	version:	6.2(2)	Trust: 0.8
vendor:	cisco	model:	nx-os software	scope:	eq	version:	0	Trust: 0.3
vendor:	cisco	model:	nexus	scope:	eq	version:	70000	Trust: 0.3

sources: BID: 67214 // JVNDB: JVNDB-2014-002406 // CNNVD: CNNVD-201405-093 // NVD: CVE-2014-0684

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2014-0684
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2014-0684
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201405-093
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-68177
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2014-0684
severity:	MEDIUM
baseScore:	4.6
vectorString:	AV:L/AC:L/AU:S/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.1
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-68177
severity:	MEDIUM
baseScore:	4.6
vectorString:	AV:L/AC:L/AU:S/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.1
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-68177 // JVNDB: JVNDB-2014-002406 // CNNVD: CNNVD-201405-093 // NVD: CVE-2014-0684

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.9

sources: VULHUB: VHN-68177 // JVNDB: JVNDB-2014-002406 // NVD: CVE-2014-0684

THREAT TYPE

local

Trust: 0.9

sources: BID: 67214 // CNNVD: CNNVD-201405-093

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201405-093

CONFIGURATIONS

sources: JVNDB: JVNDB-2014-002406

PATCH

title:	Cisco Nexus 7000 Denial of Service Vulnerability	url:	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0684	Trust: 0.8
title:	34131	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=34131	Trust: 0.8

sources: JVNDB: JVNDB-2014-002406

EXTERNAL IDS

db:	NVD	id:	CVE-2014-0684	Trust: 2.8
db:	JVNDB	id:	JVNDB-2014-002406	Trust: 0.8
db:	CNNVD	id:	CNNVD-201405-093	Trust: 0.7
db:	CISCO	id:	20140505 CISCO NEXUS 7000 DENIAL OF SERVICE VULNERABILITY	Trust: 0.6
db:	BID	id:	67214	Trust: 0.4
db:	VULHUB	id:	VHN-68177	Trust: 0.1

sources: VULHUB: VHN-68177 // BID: 67214 // JVNDB: JVNDB-2014-002406 // CNNVD: CNNVD-201405-093 // NVD: CVE-2014-0684

REFERENCES

url:	http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2014-0684	Trust: 2.0
url:	http://tools.cisco.com/security/center/viewalert.x?alertid=34131	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-0684	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-0684	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3

sources: VULHUB: VHN-68177 // BID: 67214 // JVNDB: JVNDB-2014-002406 // CNNVD: CNNVD-201405-093 // NVD: CVE-2014-0684

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 67214

SOURCES

db:	VULHUB	id:	VHN-68177
db:	BID	id:	67214
db:	JVNDB	id:	JVNDB-2014-002406
db:	CNNVD	id:	CNNVD-201405-093
db:	NVD	id:	CVE-2014-0684

LAST UPDATE DATE

2024-11-23T22:13:43.294000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-68177	date:	2014-05-07T00:00:00
db:	BID	id:	67214	date:	2014-05-05T00:00:00
db:	JVNDB	id:	JVNDB-2014-002406	date:	2014-05-08T00:00:00
db:	CNNVD	id:	CNNVD-201405-093	date:	2014-05-08T00:00:00
db:	NVD	id:	CVE-2014-0684	date:	2024-11-21T02:02:39.407

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-68177	date:	2014-05-07T00:00:00
db:	BID	id:	67214	date:	2014-05-05T00:00:00
db:	JVNDB	id:	JVNDB-2014-002406	date:	2014-05-08T00:00:00
db:	CNNVD	id:	CNNVD-201405-093	date:	2014-05-08T00:00:00
db:	NVD	id:	CVE-2014-0684	date:	2014-05-07T10:55:04.603