CVE-2019-1617: falha de alta gravidade em Cisco Nexus 9000 Series Switches in Standalone…
Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.4epss 1.3%
A vulnerability in the Fibre Channel over Ethernet (FCoE) N-port Virtualization (NPV) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to an incorrect processing of FCoE packets when the fcoe-npv feature is uninstalled. An attacker could exploit this vulnerability by sending a stream of FCoE frames from an adjacent host to an affected device. An exploit could allow the attacker to cause packet amplification to occur, resulting in the saturation of interfaces and a DoS condition. Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I7(5) and 9.2(2).
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Cisco · Nexus 9000 Series Switches in Standalone NX-OS ModeCVEs relacionadas — Cisco Nexus 9000 Series Switches in Standalone…
No mesmo produto, das mais perigosas para as menos.
CVE-2019-1599HIGHCisco NX-OS Software Netstack Denial of Service VulnerabilityEPSS 14.3%CVE-2019-1614HIGHCisco NX-OS Software NX-API Command Injection VulnerabilityEPSS 4.1%CVE-2019-1598HIGHCisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service VulnerabilitiesEPSS 2.5%CVE-2019-1597HIGHCisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service VulnerabilitiesEPSS 2.5%CVE-2019-1616HIGHCisco NX-OS Software Cisco Fabric Services Denial of Service VulnerabilityEPSS 2.4%CVE-2019-1609MEDIUMCisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609)EPSS 0.9%