CVE-2015-4197
published 2015-06-20CVE-2015-4197: Cisco NX-OS 5.2(5) on Nexus 7000 devices allows remote attackers to cause a denial of service (device crash) by sending a malformed LLDP packet on the local…
PriorityP426medium6.1CVSS 2.0
AVAACLAuNCNINAC
EPSS
1.03%
60.2th percentile
Cisco NX-OS 5.2(5) on Nexus 7000 devices allows remote attackers to cause a denial of service (device crash) by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | nx-os | — | — |
CVSS provenance
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability
vendor_cisco·2015-06-19·CVSS 6.1
CVE-2015-4197 [MEDIUM] CWE-20 Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability
Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability
A vulnerability in the Link Layer Discovery Protocol (LLDP) code of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to crash an affected device.
The vulnerability is due to an error in parsing a malformed LLDP packet. An attacker could exploit this vulnerability by sending a crafted, malformed LLDP packet to an interface enabled for LLDP packet processing.
Cisco has confirmed the vulnerability and released software updates.
To exploit this vulnerability, an attacker must be on the same broadcast or collision domain as the targeted device. This access requirement reduces the likelihood of a successful exploit.
Cisco indicates through the CVSS score that functional exploit code exi
GHSA
GHSA-2g6h-x254-rxr5: Cisco NX-OS 5
ghsa_unreviewed·2022-05-17
CVE-2015-4197 [MEDIUM] CWE-20 GHSA-2g6h-x254-rxr5: Cisco NX-OS 5
Cisco NX-OS 5.2(5) on Nexus 7000 devices allows remote attackers to cause a denial of service (device crash) by sending a malformed LLDP packet on the local network, aka Bug ID CSCud89415.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-06-20
Published