PT-2013-5646
CVE-2013-5566
·
Published
2013-11-08
·
Updated
2013-11-14
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Cisco NX-OS version 5.0 and earlier
Description
The issue allows remote attackers to cause a denial of service, specifically supervisor CPU consumption, by exploiting Authentication Header (AH) authentication in a Virtual Router Redundancy Protocol (VRRP) frame.
Recommendations
For Cisco NX-OS version 5.0 and earlier, consider disabling AH authentication in VRRP frames as a temporary workaround until a patch is available. Restrict access to VRRP to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾