Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-74jh-9vmj-8f72

Опубликовано: 24 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

EPSS

Процентиль: 19%
0.00059
Низкий

7.4 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 7.4
nvd
почти 2 года назад

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

CVSS3: 6.5
fstec
почти 2 года назад

Уязвимость реализации сетевого протокола OSPFv2 операционной системы Cisco IOS XE, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 19%
0.00059
Низкий

7.4 High

CVSS3

Дефекты

CWE-120