CVE-2018-0291 Detail
Current Description
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol data units (PDUs) in SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device. A successful exploit could allow the attacker to cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition. This vulnerability affects Nexus 2000 Series Switches, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 3600 Platform Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, UCS 6100 Series Fabric Interconnects, UCS 6200 Series Fabric Interconnects, UCS 6300 Series Fabric Interconnects. Cisco Bug IDs: CSCuw99630, CSCvg71290, CSCvj67977.
Source:
MITRE
View Analysis Description
Analysis Description
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application on an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol data units (PDUs) in SNMP packets. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device. A successful exploit could allow the attacker to cause the SNMP application to restart multiple times, leading to a system-level restart and a denial of service (DoS) condition. This vulnerability affects Nexus 2000 Series Switches, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 3600 Platform Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules, UCS 6100 Series Fabric Interconnects, UCS 6200 Series Fabric Interconnects, UCS 6300 Series Fabric Interconnects. Cisco Bug IDs: CSCuw99630, CSCvg71290, CSCvj67977.
Source:
MITRE
Impact
CVSS v3.0 Severity and Metrics:
Base Score:
6.5 MEDIUM
Vector:
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
(V3 legend)
Impact Score:
3.6
Exploitability Score:
2.8
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
None
Availability (A):
High
CVSS v2.0 Severity and Metrics:
Base Score:
6.8 MEDIUM
Vector:
(AV:N/AC:L/Au:S/C:N/I:N/A:C)
(V2 legend)
Impact Subscore:
6.9
Exploitability Subscore:
8.0
Access Vector (AV):
Network
Access Complexity (AC):
Low
Authentication (AU):
Single
Confidentiality (C):
None
Integrity (I):
None
Availability (A):
Complete
Additional Information:
Allows disruption of service
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because
they may have information that would be of interest to you. No inferences should be drawn on account of other sites
being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose.
NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further,
NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about
this page to nvd@nist.gov.
Technical Details
Vulnerability Type
(View All)
- Improper Input Validation (CWE-20)
Known Affected Software Configurations
Switch to CPE 2.2
Configuration 1 ( hide ) Configuration 2 ( hide ) Configuration 3 ( hide ) Configuration 4 ( hide ) Configuration 5 ( hide ) Configuration 6 ( hide ) Configuration 7 ( hide )
Change History
2 change records found
- show changes
Initial Analysis -
8/21/2018 9:25:26 AM
| Action |
Type |
Old Value |
New Value |
| Added |
CPE Configuration |
|
Record truncated, showing 500 of 781 characters.
View Entire Change Record
AND
OR
*cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* versions from (including) 6.0 up to (excluding) 7.3\(3\)n1\(1\)
OR
cpe:2.3:h:cisco:nexus_5000:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_5010:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_5020:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_5596up:-:*:*: |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* versions from (including) 6.0 up to (excluding) 7.3\(3\)n1\(1\)
OR
cpe:2.3:h:cisco:nexus_6001p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_6001t:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 8.1\(2\)
OR
cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_7700:-:*:*:*:*:*:*:* |
| Added |
CPE Configuration |
|
Record truncated, showing 500 of 520 characters.
View Entire Change Record
AND
OR
*cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* versions up to (excluding) 2.2
*cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* versions from (including) 2.5 up to (excluding) 3.2\(2b\)
OR
cpe:2.3:h:cisco:ucs_6120xp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ucs_6140xp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ucs_6248up:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ucs_6296up:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ucs_6324:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ucs_ |
| Added |
CPE Configuration |
|
Record truncated, showing 500 of 1781 characters.
View Entire Change Record
AND
OR
*cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* versions up to (excluding) 7.0\(3\)i3
*cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* versions from (including) 7.0\(3\)i4 up to (excluding) 7.0\(3\)i7\(1\)
OR
cpe:2.3:h:cisco:nexus_172tq-xl:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_3064-32t:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_3064-t:-:*:*:*:*:*:*: |
| Added |
CPE Configuration |
|
Record truncated, showing 500 of 1297 characters.
View Entire Change Record
AND
OR
*cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* versions up to (excluding) 7.0\(3\)i3
*cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* versions from (including) 7.0\(3\)i4 up to (excluding) 7.0\(3\)i7\(1\)
OR
cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*: |
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:cisco:nx-os:7.0:*:*:*:*:*:*:*
OR
cpe:2.3:h:cisco:nexus_9500:-:*:*:*:*:*:*:* |
| Added |
CVSS V2 |
|
(AV:N/AC:L/Au:S/C:N/I:N/A:C) |
| Added |
CVSS V3 |
|
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| Added |
CWE |
|
CWE-20 |
| Changed |
Reference Type |
http://www.securitytracker.com/id/1041169 No Types Assigned |
http://www.securitytracker.com/id/1041169 Third Party Advisory, VDB Entry |
| Changed |
Reference Type |
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nxossnmp No Types Assigned |
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nxossnmp Vendor Advisory |
CVE Modified by MITRE -
6/23/2018 9:29:00 PM
| Action |
Type |
Old Value |
New Value |
| Added |
Reference |
|
http://www.securitytracker.com/id/1041169 [No Types Assigned] |
Quick Info
CVE Dictionary Entry:
CVE-2018-0291
NVD Published Date:
06/20/2018
NVD Last Modified:
08/21/2018
|