Search...

Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability (cisco-sa-20120926-ecc)

2013-07-08T00:00:00
ID CISCO-SA-20120926-ECC.NASL
Type nessus
Reporter Tenable
Modified 2018-11-15T00:00:00

Description

The Catalyst 4500E series switch with Supervisor Engine 7L-E contains a denial of service (DoS) vulnerability when processing specially crafted packets that can cause a reload of the device. Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available.

                                        
                                            #TRUSTED 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
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Cisco Security Advisory cisco-sa-20120926-ecc.
# The text itself is copyright (C) Cisco
#

if (NASL_LEVEL < 3000) exit(0);

include("compat.inc");

if (description)
{
  script_id(67204);
  script_version("1.10");
  script_set_attribute(attribute:"plugin_modification_date", value:"2018/11/15");

  script_cve_id("CVE-2012-4622");
  script_bugtraq_id(55701);
  script_xref(name:"CISCO-BUG-ID", value:"CSCty88456");
  script_xref(name:"CISCO-SA", value:"cisco-sa-20120926-ecc");
  script_xref(name:"IAVA", value:"2012-A-0154");

  script_name(english:"Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability (cisco-sa-20120926-ecc)");
  script_summary(english:"Checks the IOS version.");

  script_set_attribute(
    attribute:"synopsis",
    value:"The remote device is missing a vendor-supplied security patch."
  );
  script_set_attribute(
    attribute:"description",
    value:
"The Catalyst 4500E series switch with Supervisor Engine 7L-E contains
a denial of service (DoS) vulnerability when processing specially
crafted packets that can cause a reload of the device. Cisco has
released free software updates that address this vulnerability.
Workarounds that mitigate this vulnerability are not available."
  );
  # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-ecc
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?3693a5e7"
  );
  script_set_attribute(
    attribute:"solution",
    value:
"Apply the relevant patch referenced in Cisco Security Advisory
cisco-sa-20120926-ecc."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:ios");

  script_set_attribute(attribute:"vuln_publication_date", value:"2012/09/26");
  script_set_attribute(attribute:"patch_publication_date", value:"2012/09/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2013/07/08");

  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.");
  script_family(english:"CISCO");

  script_dependencies("cisco_ios_version.nasl");
  script_require_keys("Host/Cisco/IOS/Version");

  exit(0);
}



include("audit.inc");
include("cisco_func.inc");
include("cisco_kb_cmd_func.inc");

flag = 0;
override = 0;

version = get_kb_item_or_exit("Host/Cisco/IOS/Version");
if ( version == '15.0(2)XO' ) flag++;

if (get_kb_item("Host/local_checks_enabled"))
{

  if (flag)
  {
    flag = 0;
    buf = cisco_command_kb_item("Host/Cisco/Config/show_module", "show module");
    if (check_cisco_result(buf))
    {
      if (preg(pattern:"WS-X45-SUP7L-E ", multiline:TRUE, string:buf)) { flag = 1; }
    } else if (cisco_needs_enable(buf)) { flag = 1; override = 1; }
  }
}


if (flag)
{
  security_hole(port:0, extra:cisco_caveat(override));
  exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");
JSON Vulners Source
Initial Source


All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please mail to content@vulners.com Vulners, 2018
Protected by