PT-2012-3203
CVE-2012-1357
·
Published
2012-08-06
·
Updated
2012-08-07
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Cisco Nexus 5000 series switches NX-OS versions 5.0 through 5.1
Description
The issue is related to the igmp snoop orib fill source update function in the IGMP process, which allows remote attackers to cause a denial of service, resulting in a device reload, via IGMP packets.
Recommendations
For NX-OS versions 5.0 through 5.1, consider disabling the IGMP process as a temporary workaround until a patch is available. Restrict access to the IGMP packets to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾