Description (CNA)
A vulnerability in Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation when processing specific Ethernet frames. An attacker could exploit this vulnerability by sending a crafted Ethernet frame to the management interface of an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. Note: Only the out-of-band (OOB) management interface is affected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco NX-OS System Software in ACI Mode | affected 15.2(1g); affected 15.2(2e); affected 15.2(2f); affected 15.2(2g); affected 15.2(2h); affected 15.2(3f); affected 15.2(3e); affected 15.2(3g); affected 15.2(4d); affected 15.2(4e); affected 15.2(5c); affected 15.2(5d); affected 16.0(1g); affected 15.2(5e); affected 15.2(4f); affected 15.2(6e); affected 15.2(6h); affected 16.0(1j); affected 15.2(6g); affected 15.2(7f); affected 15.2(7g); affected 16.0(2h); affected 15.2(8d); affected 16.0(2j); affected 15.2(8e); affected 16.0(3d); affected 16.0(3e); affected 15.2(8f); affected 15.2(8g); affected 15.3(1d); affected 15.2(8h); affected 16.0(4c); affected 15.3(2a); affected 15.2(8i); affected 16.0(5h); affected 15.3(2b); affected 16.0(3g); affected 16.0(5j); affected 15.3(2c); affected 16.0(6c); affected 15.3(2d); affected 16.1(1f); affected 16.0(7e); affected 16.0(8e); affected 15.3(2e); affected 16.0(8f); affected 16.1(2f); affected 16.1(2g); affected 15.3(2f); affected 16.0(9c); affected 16.1(3f); affected 16.0(9d); affected 16.0(6h); affected 16.0(8h); affected 16.1(3g); affected 16.0(9e); affected 16.1(4h) |
CWE
CWE-805
References
ADP enrichment
No English description supplied.
No references supplied.