SB2016100529 - Denial of service in Cisco Nexus 9000 Series Switches in ACI Mode
Published: October 5, 2016 Updated: April 5, 2018
Security Bulletin ID
SB2016100529
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Denial of service (CVE-ID: CVE-2015-6392)
The vulnerability allows a remote unathenticated user to cause DoS conditions on the target system.The weakness is caused by improper validation of the DHCPv4 packets. By sending a specially crafted DHCPv4 packets attackers can cause the DHCP process or device to crash.
Succesfull exploitation of the vulnerability results in denial of service on the vulnerable system.
Remediation
Install update from vendor's website.