Severe Cisco DoS Flaw Can Cripple Nexus Switches

🗓️ 02 Jun 2020 16:16:31Reported by Lindsey O'DonnellType

threatpost🔗 threatpost.com👁 306 Views

Severe Cisco DoS vulnerability patche

Reporter	Title	Published	Views	Family All 277
zdt	Magento 2.4.0 / 2.3.5p1 (and earlier) Arbitrary Code Execution 0day Exploit	24 Mar 202100:00	–	zdt
ATTACKERKB	CVE-2020-5135	12 Oct 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-24407	15 Oct 202023:00	–	attackerkb
Information Security Automation	Last Week’s Security news: Cisco ASA, BIG-IQ, vSphere, Solaris, Dlink, iPhone %s, DarkRadiation, Google schema, John McAfee	28 Jun 202110:59	–	avleonov
BDU FSTEC	The vulnerability of the Cisco NX-OS operating system, related to bypassing authentication through spoofing, allows a perpetrator to trigger a service failure.	17 Jul 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of measures to protect SQL query structures. This allows attackers to execute arbitrary SQL queries against the database in the target system and gain access to protected information.	12 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of restrictions on file uploads, which allows attackers to execute arbitrary code.	17 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SonicOS operating systems lies in the lack of a mechanism to check the size of copied data. This allows attackers to execute arbitrary code or cause service failures.	17 Sep 202100:00	–	bdu_fstec
Circl	CVE-2020-10136	3 Jun 202004:00	–	circl
Circl	CVE-2020-24400	15 Oct 202023:29	–	circl

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4
threatpost	www.threatpost.com/newsletter-sign/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-10136
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipip-dos-kCT9X4
media	www.media.threatpost.com/wp-content/uploads/sites/103/2020/06/02110207/cisco-flaw.png
kb	www.kb.cert.org/vuls/id/636397
github	www.github.com/CERTCC/PoC-Exploits/tree/master/cve-2020-10136
threatpost	www.threatpost.com/hackers-compromise-cisco-servers-saltstack/156091/
threatpost	www.threatpost.com/salt-bugs-full-rce-root-cloud-servers/155383/
attendee	www.attendee.gotowebinar.com/register/1837650474090338831

02 Jun 2020 16:16Current

EPSS0.28537

cisco dos vulnerability nexus switches ip-in-ip patch network stack cve-2020-10136 exploit patch poc exploit code critical saltstack