Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.106338
Categoría:CISCO
Título:Cisco Nexus 9000 Information Disclosure Vulnerability (cisco-sa-20161005-n9kinfo)
Resumen:A vulnerability in the internal iptables configuration for; local interfaces on the Cisco Nexus 9000 Series Switch could allow an unauthenticated, remote; attacker to access certain sensitive data. The attacker could use this information to conduct; additional reconnaissance attacks.
Descripción:Summary:
A vulnerability in the internal iptables configuration for
local interfaces on the Cisco Nexus 9000 Series Switch could allow an unauthenticated, remote
attacker to access certain sensitive data. The attacker could use this information to conduct
additional reconnaissance attacks.

Vulnerability Insight:
The vulnerability is due to incorrect filtering of network
traffic destined to certain TCP and UDP ports configured on a local interface. An attacker could
exploit this vulnerability by connecting to the affected device on one of the exposed TCP or UDP
ports.

Vulnerability Impact:
An exploit could allow the attacker to discover certain
sensitive data which should be restricted and could be used to conduct further attacks.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2016-1455
BugTraq ID: 93415
http://www.securityfocus.com/bid/93415
Cisco Security Advisory: 20161005 Cisco Nexus 9000 Information Disclosure Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-n9kinfo
http://www.securitytracker.com/id/1036957
CopyrightCopyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.