CVE-2015-6398
published 2016-02-07CVE-2015-6398: Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0(1c) allow remote attackers to cause a denial of service…
PriorityP337high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
1.93%
77.7th percentile
Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0(1c) allow remote attackers to cause a denial of service (device reload) via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | nexus_9000_series_aci_mode_switch_icmp_record_route | — | — |
| zyxel | gs1900-10hp_firmware | < 2.50\(aazi.0\)c0 | 2.50\(aazi.0\)c0 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Nexus 9000 Series ACI Mode Switch ICMP Record Route Vulnerability
vendor_cisco·2016-02-03·CVSS 7.8
CVE-2015-6398 [HIGH] CWE-399 Cisco Nexus 9000 Series ACI Mode Switch ICMP Record Route Vulnerability
Cisco Nexus 9000 Series ACI Mode Switch ICMP Record Route Vulnerability
A vulnerability in the ICMP implementation in the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch could allow an unauthenticated, remote attacker to cause the switch to reload, resulting in a denial of service (DoS) condition.
The vulnerability is due to improper handling of an ICMP packet with the IPv4 Type 7 option for record route. An attacker could exploit this vulnerability by sending an ICMP packet with the record route option to an interface on the affected switch. An exploit could allow the attacker to cause a DoS condition because the switch will reload each time the ICMP packet is received.
Cisco has released software updates that address this vulnerability. A workaround that a
Cisco
Cisco Nexus 9000 Series ACI Mode Switch ICMP Record Route Vulnerability
vendor_cisco
CVE-2015-6398 Cisco Nexus 9000 Series ACI Mode Switch ICMP Record Route Vulnerability
CVE-2015-6398: Cisco Nexus 9000 Series ACI Mode Switch ICMP Record Route Vulnerability
A vulnerability in the ICMP implementation in the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch could allow an unauthenticated, remote attacker to cause the switch to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper handling of an ICMP packet with the IPv4 Type 7 option for record route. An attacker could exploit this vulnerability by sending an ICMP packet with the record route option to an interface on the affected switch. An exploit could allow the attacker to cause a DoS condition because the switch will reload each time the ICMP packet is received. Cisco has released software updates that address this vulnerability. A worka
GHSA
GHSA-9xp8-gfgp-2mp7: Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11
ghsa_unreviewed·2022-05-17
CVE-2015-6398 [HIGH] GHSA-9xp8-gfgp-2mp7: Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11
Cisco Nexus 9000 Application Centric Infrastructure (ACI) Mode switches with software before 11.0(1c) allow remote attackers to cause a denial of service (device reload) via an IPv4 ICMP packet with the IP Record Route option, aka Bug ID CSCuq57512.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-02-07
Published