Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-0209

Опубликовано: 08 мар. 2018
Источник: nvd
CVSS3: 7.7
CVSS2: 6.8
EPSS Низкий

Описание

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem communication channel through the Cisco 550X Series Stackable Managed Switches could allow an authenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device nay need to be manually reloaded to recover. The vulnerability is due to lack of proper input throttling of ingress SNMP traffic over an internal interface. An attacker could exploit this vulnerability by sending a crafted, heavy stream of SNMP traffic to the targeted device. An exploit could allow the attacker to cause the device to reload unexpectedly, causing a DoS condition. Cisco Bug IDs: CSCvg22135.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:cisco:small_business_500_series_stackable_managed_switches_firmware:2.2.5.68:*:*:*:*:*:*:*
cpe:2.3:o:cisco:small_business_500_series_stackable_managed_switches_firmware:2.3.0.130:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:sf500-24:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sf500-24mp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sf500-24p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sf500-48:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sf500-48mp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sf500-48p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500-28:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500-28mpp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500-28p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500-52:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500-52mp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500-52p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500x-24:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500x-24mpp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500x-24p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500x-48:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500x-48mp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500x-48p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sg500xg-8f8t:-:*:*:*:*:*:*:*

EPSS

Процентиль: 70%
0.0067
Низкий

7.7 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119
NVD-CWE-Other

Связанные уязвимости

CVSS3: 7.7
github
около 3 лет назад

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem communication channel through the Cisco 550X Series Stackable Managed Switches could allow an authenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device nay need to be manually reloaded to recover. The vulnerability is due to lack of proper input throttling of ingress SNMP traffic over an internal interface. An attacker could exploit this vulnerability by sending a crafted, heavy stream of SNMP traffic to the targeted device. An exploit could allow the attacker to cause the device to reload unexpectedly, causing a DoS condition. Cisco Bug IDs: CSCvg22135.

EPSS

Процентиль: 70%
0.0067
Низкий

7.7 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119
NVD-CWE-Other