A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HCisco IOS
OSCisco12.2\(33\)sxi1012.2\(33\)sxi1112.2\(33\)sxi1212.2\(33\)sxi1312.2\(33\)sxi1412.2\(33\)sxi412.2\(33\)sxi4a12.2\(33\)sxi512.2\(33\)sxi612.2\(33\)sxi712.2\(33\)sxi812.2\(33\)sxi8a12.2\(33\)sxi912.2\(33\)sxj12.2\(33\)sxj1+ 85 więcej
Powiązane podatności
RCE i DoS w funkcji Smart Install systemu Cisco IOS przez przepełnienie bufora
Buffer overflow w DHCP relay Cisco IOS — RCE bez uwierzytelnienia
RCE w Cisco IOS/IOS XE – podatność protokołu CMP przez Telnet
RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP
RCE w Cisco IOS dla routerów przemysłowych ISR 809/829 i CGR1000