CRITICAL✓ PATCH🇬🇧 English

CVE-2016-1453

CVSS 9.8v3.1pub. 2016-10-06upd. 2026-05-06

Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Nx Os

    OS
    Cisco
    4.1.\(2\)4.1.\(3\)4.1.\(4\)4.1.\(5\)4.2.\(2a\)4.2\(3\)4.2\(4\)4.2\(6\)4.2\(8\)5.0\(2a\)5.0\(3\)5.0\(5\)5.1\(1\)5.1\(1a\)5.1\(3\)+ 31 więcej
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
RCEMemory
CWE
Referencje

Powiązane podatności

CVE-2021-1361CRITICAL9.8ten sam produkt

A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switc...

CVE-2018-0310CRITICAL9.8ten sam produkt

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could a...

CVE-2018-0301CRITICAL9.8ten sam produkt

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker ...

CVE-2016-1341CRITICAL9.8ten sam produkt

Cisco NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1) on Nexus 2000 Fabric Extender devices has a blank root p...

CVE-2024-20267HIGH8.6ten sam produkt

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, rem...