PT-2016-1515

CVE-2015-6260

·

Published

2016-03-02

·

Updated

2016-12-03

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices
Description The issue exists due to insufficient validation of PDU fragments in SNMP packets. This allows a remote attacker to cause a denial of service (SNMP application restart) by sending a specially crafted packet. An attacker could exploit this by sending a crafted SNMP packet, causing the SNMP application to restart, potentially leading to a system-level restart and a denial of service condition.
Recommendations For Cisco NX-OS version 7.1(1)N1(1), update to a newer version that includes the fix for this issue, as software updates have been released by Cisco to address this vulnerability. At the moment, there is no information about other versions that contain a fix for this vulnerability.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾