PT-2023-1436 · Cisco · Cisco Nexus Dashboard
CVE-2023-20014
·
Publicado
2023-02-15
·
Atualizado
2024-01-25
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco Nexus Dashboard Software (affected versions not specified)
Description
A vulnerability in the DNS functionality could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This issue is due to the improper processing of DNS requests. An attacker could exploit this by sending a continuous stream of DNS requests to an affected device, potentially causing the coredns service to stop working or the device to reload.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Resource Exhaustion
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cisco Nexus Dashboard