Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-0094

Опубликовано: 18 янв. 2018
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate limiting protection for IPv6 ingress traffic. An attacker could exploit this vulnerability by sending the affected device a high rate of IPv6 packets. Successful exploitation could allow the attacker to cause a DoS condition due to CPU and resource constraints. Cisco Bug IDs: CSCuv34544.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cisco:unified_computing_system_central_software:1.4\(1a\):*:*:*:*:*:*:*

EPSS

Процентиль: 80%
0.01409
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-693
CWE-400

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate limiting protection for IPv6 ingress traffic. An attacker could exploit this vulnerability by sending the affected device a high rate of IPv6 packets. Successful exploitation could allow the attacker to cause a DoS condition due to CPU and resource constraints. Cisco Bug IDs: CSCuv34544.

EPSS

Процентиль: 80%
0.01409
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-693
CWE-400