2 lines
5.0 KiB
JSON
2 lines
5.0 KiB
JSON
{"affected":[{"affectedData":[{"product":"Cisco Nexus 5000, 6000, 7000","vendor":"n/a","versions":[{"status":"affected","version":"Cisco Nexus 5000, 6000, 7000"}]}],"source":"psirt@cisco.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2.1\\):*:*:*:*:*:*:*","matchCriteriaId":"C97083C8-89AE-4D0D-A039-1B798D60B573","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(3.12\\):*:*:*:*:*:*:*","matchCriteriaId":"768151A3-CCF6-4F37-877F-4F1F2CD60791","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:nx-os:7.3\\(2\\)n1\\(0.296\\):*:*:*:*:*:*:*","matchCriteriaId":"8BB84933-1B94-474A-ABB6-AFF91B62446A","vulnerable":true},{"criteria":"cpe:2.3:o:cisco:nx-os:8.0\\(1\\)s2:*:*:*:*:*:*:*","matchCriteriaId":"167FD2BD-A610-4966-86DF-DA5C78E0D3D2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:cisco:nexus_5000:-:*:*:*:*:*:*:*","matchCriteriaId":"4F2B1E07-8519-4F58-9048-81ABA12E01DC","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*","matchCriteriaId":"A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*","matchCriteriaId":"4F557E38-09F6-42C6-BABA-3C3168B38BBA","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*","matchCriteriaId":"12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6000, and 7000 Series Switches software could allow an unauthenticated, adjacent attacker to cause a reload of the affected device. Switches in the FabricPath domain crash because of an __inst_001__isis_fabricpath hap reset when processing a crafted link-state packet. More Information: CSCvc45002. Known Affected Releases: 7.1(3)N1(2.1) 7.1(3)N1(3.12) 7.3(2)N1(0.296) 8.0(1)S2. Known Fixed Releases: 6.2(18)S11 7.0(3)I5(1.170) 7.0(3)I5(2) 7.1(4)N1(0.4) 7.1(4)N1(1b) 7.1(5)N1(0.986) 7.1(5)N1(1) 7.2(3)D1(0.8) 7.3(2)N1(0.304) 7.3(2)N1(1) 8.0(0.96)S0 8.0(1) 8.0(1)E1 8.0(1)S4 8.3(0)CV(0.788)."},{"lang":"es","value":"Una vulnerabilidad en el protocolo de procesamiento de paquetes Intermediate System-to-Intermediate System (IS-IS) de software Cisco Nexus 5000, 6000 y 7000 Series Switches podría permitir a un atacante adyacente no autenticado provocar un reinicio de los dispositivos afectados. Switches en el dominio FabricPath se bloquea a causa de un reinicio hap __inst_001__isis_fabricpath cuando se procesa un paquete de estado de enlace manipulado. Más información: CSCvc45002. Lanzamientos afectados conocidos: 7.1(3)N1(2.1) 7.1(3)N1(3.12) 7.3(2)N1(0.296) 8.0(1)S2. Lanzamientos reparados conocidos: 6.2(18)S11 7.0(3)I5(1.170) 7.0(3)I5(2) 7.1(4)N1(0.4) 7.1(4)N1(1b) 7.1(5)N1(0.986) 7.1(5)N1(1) 7.2(3)D1(0.8) 7.3(2)N1(0.304) 7.3(2)N1(1) 8.0(0.96)S0 8.0(1) 8.0(1)E1 8.0(1)S4 8.3(0)CV(0.788)."}],"id":"CVE-2017-3804","lastModified":"2026-06-17T01:18:57.163","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"ADJACENT_NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":5.7,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:A/AC:M/Au:N/C:N/I:N/A:C","version":"2.0"},"exploitabilityScore":5.5,"impactScore":6.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","version":"3.0"},"exploitabilityScore":1.6,"impactScore":4.0,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-01-26T07:59:00.623","references":[{"source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/95638"},{"source":"psirt@cisco.com","url":"http://www.securitytracker.com/id/1037658"},{"source":"psirt@cisco.com","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-nexus"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/95638"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.securitytracker.com/id/1037658"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-nexus"}],"sourceIdentifier":"psirt@cisco.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|