PT-2023-1436 · Cisco · Cisco Nexus Dashboard

CVE-2023-20014

·

Publicado

2023-02-15

·

Atualizado

2024-01-25

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Nexus Dashboard Software (affected versions not specified)
Description A vulnerability in the DNS functionality could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This issue is due to the improper processing of DNS requests. An attacker could exploit this by sending a continuous stream of DNS requests to an affected device, potentially causing the coredns service to stop working or the device to reload.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-00843
CVE-2023-20014

Produtos afetados

Cisco Nexus Dashboard