Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q7hr-x75r-2mp7

Опубликовано: 06 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. 

This vulnerability exists because ACL deny rules are not properly enforced at the time of device reboot. An attacker could exploit this vulnerability by attempting to send traffic to the management interface of an affected device. A successful exploit could allow the attacker to send traffic to the management interface of the affected device.

A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. 

This vulnerability exists because ACL deny rules are not properly enforced at the time of device reboot. An attacker could exploit this vulnerability by attempting to send traffic to the management interface of an affected device. A successful exploit could allow the attacker to send traffic to the management interface of the affected device.

EPSS

Процентиль: 45%
0.00225
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
nvd
больше 1 года назад

A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device.  This vulnerability exists because ACL deny rules are not properly enforced at the time of device reboot. An attacker could exploit this vulnerability by attempting to send traffic to the management interface of an affected device. A successful exploit could allow the attacker to send traffic to the management interface of the affected device.

CVSS3: 5.3
fstec
больше 1 года назад

Уязвимость механизма списка контроля доступа (ACL) микропрограммного обеспечения виртуального коммутатора Cisco Nexus 3550-F, позволяющая нарушителю отправлять трафик в интерфейс управления уязвимого устройства

EPSS

Процентиль: 45%
0.00225
Низкий

5.3 Medium

CVSS3