Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.106857
Kategorie:CISCO
Titel:Cisco Network Convergence System 5500 Series Routers Local Denial of Service Vulnerability (cisco-sa-20170607-ncs)
Zusammenfassung:A vulnerability in the forwarding component of Cisco IOS XR; Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an; authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic; Engineering tunnels, resulting in a denial of service (DoS) condition.
Beschreibung:Summary:
A vulnerability in the forwarding component of Cisco IOS XR
Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an
authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic
Engineering tunnels, resulting in a denial of service (DoS) condition.

Vulnerability Insight:
The vulnerability occurs because adjacency information for a
Traffic Engineering tunnel's physical source interface is not propagated to hardware after
the adjacency is lost. This information needs to be relearned. An attacker could exploit this
vulnerability by logging in to the router's CLI with administrator privileges and issuing the
clear arp-cache command.

Vulnerability Impact:
A local attacker may cause a denial of service condition.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
1.9

CVSS Vector:
AV:L/AC:M/Au:N/C:N/I:N/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2017-6666
BugTraq ID: 98987
http://www.securityfocus.com/bid/98987
http://www.securitytracker.com/id/1038630
CopyrightCopyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.