Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vcq5-wh47-842g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of DECnet traffic that is received by an affected device. An attacker could exploit this vulnerability by sending DECnet traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of DECnet traffic that is received by an affected device. An attacker could exploit this vulnerability by sending DECnet traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

EPSS

Процентиль: 22%
0.00074
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-119
CWE-823

Связанные уязвимости

CVSS3: 7.4
nvd
почти 5 лет назад

A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of DECnet traffic that is received by an affected device. An attacker could exploit this vulnerability by sending DECnet traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

CVSS3: 7.4
fstec
почти 5 лет назад

Уязвимость набора протоколов DECnet Phase IV и DECnet/OSI операционных систем Cisco IOS XE, позволяющая нарушителю вызвать отказ в обслуживании или вызвать перезагрузку устройства

EPSS

Процентиль: 22%
0.00074
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-119
CWE-823