CVE-2017-12240
CVE-2017-12240
En resumen
Un desbordamiento de búfer en el relé DHCP de Cisco IOS permite que atacantes remotos envíen paquetes especialmente diseñados para bloquear el sistema o ejecutar código malicioso, obteniendo control total sin necesidad de autenticación.
Detalle técnico
Desbordamiento de búfer en el subsistema de relé DHCP (CWE-20: validación inadecuada de entrada) desencadenado por paquetes DHCPv4 malformados desde atacantes remotos no autenticados; la explotación resulta en ejecución de código arbitrario o denegación de servicio mediante reinicio del sistema. Afecta a Cisco IOS 12.2–15.6 e IOS XE Software.
Resumen generado y traducido por IA a partir de la descripción oficial.
The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system. The attacker could also cause an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to a buffer overflow condition in the DHCP relay subsystem of the affected software. An attacker could exploit this vulnerability by sending a crafted DHCP Version 4 (DHCPv4) packet to an affected system. A successful exploit could allow the attacker to execute arbitrary code and gain full control of the affected system or cause the affected system to reload, resulting in a DoS condition. Cisco Bug IDs: CSCsm45390, CSCuw77959.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · Cisco IOS and IOS XE¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://quickview.cloudapps.cisco.com/quickview/bug/CSCsm45390https://quickview.cloudapps.cisco.com/quickview/bug/CSCuw77959https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-dhcphttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12240http://www.securityfocus.com/bid/101034http://www.securitytracker.com/id/1039445