Lucene search

[email protected]CVE-2018-0331

HistoryJun 21, 2018 - 11:29 a.m.

CVE-2018-0331

2018-06-2111:29:00

CWE-20

CWE-399

[email protected]

web.nvd.nist.gov

cisco

discovery protocol

vulnerability

nx-os

dos

firepower

mds

nexus

ucs

security

cve-2018-0331

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.6%

JSON

A vulnerability in the Cisco Discovery Protocol (formerly known as CDP) subsystem of devices running, or based on, Cisco NX-OS Software contain a vulnerability that could allow an unauthenticated, adjacent attacker to create a denial of service (DoS) condition. The vulnerability is due to a failure to properly validate certain fields within a Cisco Discovery Protocol message prior to processing it. An attacker with the ability to submit a Cisco Discovery Protocol message designed to trigger the issue could cause a DoS condition on an affected device while the device restarts. This vulnerability affects Firepower 4100 Series Next-Generation Firewall, Firepower 9300 Security Appliance, MDS 9000 Series Multilayer Director Switches, Nexus 1000V Series Switches, Nexus 1100 Series Cloud Services Platforms, Nexus 2000 Series Switches, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 3600 Platform Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, UCS 6100 Series Fabric Interconnects, UCS 6200 Series Fabric Interconnects, UCS 6300 Series Fabric Interconnects. Cisco Bug IDs: CSCvc89242, CSCve40943, CSCve40953, CSCve40965, CSCve40970, CSCve40978, CSCve40992, CSCve41000, CSCve41007.

Affected configurations

NVD

Node

cisconx-osRange7.1–7.1\(5\)n1\(1\)

cisconx-osRange7.3–7.3\(3\)n1\(1\)

cisconx-osMatch6.0

cisconx-osMatch7.0

cisconx-osMatch7.2

AND

cisconexus_5000Match-

cisconexus_5010Match-

cisconexus_5020Match-

cisconexus_5548pMatch-

cisconexus_5548upMatch-

cisconexus_5596tMatch-

cisconexus_5596upMatch-

cisconexus_56128pMatch-

cisconexus_5624qMatch-

cisconexus_5648qMatch-

cisconexus_5672upMatch-

cisconexus_5696qMatch-

Node

cisconx-osRange6.2–6.2\(20\)

cisconx-osRange7.2–7.2\(2\)d1\(3\)

cisconx-osRange7.3–7.3\(2\)d1\(1\)

cisconx-osRange8.1–8.1\(2\)

cisconx-osRange8.2–8.2\(1\)

cisconx-osMatch8.0

AND

cisconexus_7000Match-

cisconexus_7700Match-

Node

cisconx-osRange<7.0\(3\)i3

cisconx-osRange7.0\(3\)i4–7.0\(3\)i7\(1\)

AND

cisconexus_92160yc-xMatch-

cisconexus_92304qcMatch-

cisconexus_9236cMatch-

cisconexus_9272qMatch-

cisconexus_93108tc-exMatch-

cisconexus_93120txMatch-

cisconexus_93128txMatch-

cisconexus_93180yc-exMatch-

cisconexus_9332pqMatch-

cisconexus_9372pxMatch-

cisconexus_9372txMatch-

cisconexus_9396pxMatch-

cisconexus_9396txMatch-

cisconexus_9504Match-

cisconexus_9508Match-

cisconexus_9516Match-

cisconexus_n9k-c9508-fm-rMatch-

cisconexus_n9k-x9636c-rMatch-

cisconexus_n9k-x9636q-rMatch-

Node

cisconx-osRange<7.0\(3\)i7\(1\)

AND

cisconexus_172tq-xlMatch-

cisconexus_3016Match-

cisconexus_3048Match-

cisconexus_3064-32tMatch-

cisconexus_3064-tMatch-

cisconexus_3064-xMatch-

cisconexus_3100-vMatch-

cisconexus_31128pqMatch-

cisconexus_3132c-zMatch-

cisconexus_3132qMatch-

cisconexus_3132q-xMatch-

cisconexus_3132q-xlMatch-

cisconexus_3164qMatch-

cisconexus_3172pqMatch-

cisconexus_3172pq-xlMatch-

cisconexus_3172tqMatch-

cisconexus_3172tq-32tMatch-

cisconexus_3232cMatch-

cisconexus_3264c-eMatch-

cisconexus_3264qMatch-

cisconexus_34180ycMatch-

cisconexus_3524-xMatch-

cisconexus_3524-xlMatch-

cisconexus_3548Match-

cisconexus_3548-xMatch-

cisconexus_3548-xlMatch-

cisconexus_3636c-rMatch-

cisconexus_c36180yc-rMatch-

Node

cisconx-osRange6.0–7.3\(3\)n1\(1\)

AND

cisconexus_6001pMatch-

cisconexus_6001tMatch-

Node

cisconx-osRange5.2–8.1\(1a\)

AND

ciscomds_9000Match-

Node

cisconx-osRange<2.2\(8g\)

cisconx-osRange2.5–3.1\(2f\)

AND

ciscoucs_6120xpMatch-

ciscoucs_6140xpMatch-

ciscoucs_6248upMatch-

ciscoucs_6296upMatch-

ciscoucs_6324Match-

ciscoucs_6332Match-

Node

ciscofirepower_extensible_operating_systemRange1.1–2.0.1.153

ciscofirepower_extensible_operating_systemRange2.1.1–2.1.1.86

ciscofirepower_extensible_operating_systemRange2.2.1–2.2.1.70

ciscofxosRange2.2.2–2.2.2.14

AND

ciscofirepower_4110Match-

ciscofirepower_4120Match-

ciscofirepower_4140Match-

ciscofirepower_4150Match-

Node

ciscofirepower_extensible_operating_systemRange2.1.1–2.1.1.86

ciscofirepower_extensible_operating_systemRange2.2.1–2.2.1.70

ciscofxosRange1.1–2.0.1.152

ciscofxosRange2.2.2–2.2.2.14

AND

ciscofirepower_9300_security_applianceMatch-

CPENameOperatorVersion
cisco:nx-oscisco nx-oslt7.1\(5\)n1\(1\)
cisco:nx-oscisco nx-oslt7.3\(3\)n1\(1\)
cisco:nx-oscisco nx-oseq6.0
cisco:nx-oscisco nx-oseq7.0
cisco:nx-oscisco nx-oseq7.2

CPE	Name	Operator	Version
cisco:nx-os	cisco nx-os	lt	7.1\(5\)n1\(1\)
cisco:nx-os	cisco nx-os	lt	7.3\(3\)n1\(1\)
cisco:nx-os	cisco nx-os	eq	6.0
cisco:nx-os	cisco nx-os	eq	7.0
cisco:nx-os	cisco nx-os	eq	7.2

CNA Affected

[
  {
    "product": "Cisco FXOS, NX-OS, and UCS Manager unknown",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco FXOS, NX-OS, and UCS Manager unknown"
      }
    ]
  }
]

References

www.securitytracker.com/id/1041169

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nxos-cdp

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.6%

JSON

Related for CVE-2018-0331

nvd1 nessus3 cvelist1 prion1 cisco1