EN

Tracker / CVE-2022-20823

CVE-2022-20823

Alta 8.6

A vulnerability in the OSPF version 3 (OSPFv3) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to incomplete input validation of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending a malicious OSPFv3 link-state advertisement (LSA) to an affected device. A successful exploit could allow the attacker to cause the OSPFv3 process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The OSPFv3 feature is disabled by default. To exploit this vulnerability, an attacker must be able to establish a full OSPFv3 neighbor state with an affected device. For more information about exploitation conditions, see the Details section of this advisory.

Prodotti e versioni affette

cisco nexus_3016_firmware
cisco nexus_3016q_firmware
cisco nexus_3048_firmware
cisco nexus_3064-32t_firmware
cisco nexus_3064-t_firmware
cisco nexus_3064-x_firmware
cisco nexus_3064_firmware
cisco nexus_3064t_firmware
cisco nexus_3064x_firmware
cisco nexus_3100-v_firmware
cisco nexus_3100-z_firmware
cisco nexus_3100_firmware
cisco nexus_3100v_firmware
cisco nexus_31108pc-v_firmware
cisco nexus_31108pv-v_firmware
cisco nexus_31108tc-v_firmware
cisco nexus_31128pq_firmware
cisco nexus_3132c-z_firmware
cisco nexus_3132q-v_firmware
cisco nexus_3132q-x\/3132q-xl_firmware
cisco nexus_3132q-x_firmware
cisco nexus_3132q-xl_firmware
cisco nexus_3132q_firmware
cisco nexus_3164q_firmware
cisco nexus_3172_firmware
cisco nexus_3172pq-xl_firmware
cisco nexus_3172pq\/pq-xl_firmware
cisco nexus_3172pq_firmware
cisco nexus_3172tq-32t_firmware
cisco nexus_3172tq-xl_firmware
cisco nexus_3172tq_firmware
cisco nexus_3200_firmware
cisco nexus_3232c__firmware
cisco nexus_3232c_firmware
cisco nexus_3264c-e_firmware
cisco nexus_3264q_firmware
cisco nexus_3400_firmware
cisco nexus_3408-s_firmware
cisco nexus_34180yc_firmware
cisco nexus_34200yc-sm_firmware
cisco nexus_3432d-s_firmware
cisco nexus_3464c_firmware
cisco nexus_3500_firmware
cisco nexus_3500_platform_firmware
cisco nexus_3524-x\/xl_firmware
cisco nexus_3524-x_firmware
cisco nexus_3524-xl_firmware
cisco nexus_3524_firmware
cisco nexus_3548-x\/xl_firmware
cisco nexus_3548-x_firmware
cisco nexus_3548-xl_firmware
cisco nexus_3548_firmware
cisco nexus_3600_firmware
cisco nexus_36180yc-r_firmware
cisco nexus_3636c-r_firmware
cisco nexus_5500_firmware
cisco nexus_5548p_firmware
cisco nexus_5548up_firmware
cisco nexus_5596t_firmware
cisco nexus_5596up_firmware

Analisi

Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.

Riferimenti