Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol Denial of Service Vulnerability

Hemos recibido recientemente del Centro Criptológico Nacional, esta noticia importante:

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this

More info:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-n3_9k-isis-dos-FTCXB4Vb?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Nexus%203000%20and%209000%20Series%20Switches%20IS-IS%20Protocol%20Denial%20of%20Service%20Vulnerability&vs_k=1



Puedes encontrar más detalles en el link de abajo:

http://www.ccn-cert.cni.es/component/vulnerabilidades/view/34606.html