Описание
The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to cause a denial of service (device crash) via crafted LLDPDUs, aka Bug ID CSCtj22354.
Ссылки
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 12.2 (включая) до 12.2\(33\)sxj1 (исключая)
cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
EPSS
Процентиль: 66%
0.00527
Низкий
7.5 High
CVSS3
7.8 High
CVSS2
Дефекты
CWE-400
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
The ethernet-lldp component in Cisco IOS 12.2 before 12.2(33)SXJ1 does not properly support a large number of LLDP Management Address (MA) TLVs, which allows remote attackers to cause a denial of service (device crash) via crafted LLDPDUs, aka Bug ID CSCtj22354.
EPSS
Процентиль: 66%
0.00527
Низкий
7.5 High
CVSS3
7.8 High
CVSS2
Дефекты
CWE-400