Lucene search

CiscoCVE-2018-0094

HistoryJan 18, 2018 - 6:29 a.m.

CVE-2018-0094

2018-01-1806:29:00

CWE-693

CWE-400

cisco

web.nvd.nist.gov

ipv6

ingress

packet processing

vulnerability

cisco

ucs central software

dos

cpu utilization

nvd

cve-2018-0094

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

61.9%

JSON

A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate limiting protection for IPv6 ingress traffic. An attacker could exploit this vulnerability by sending the affected device a high rate of IPv6 packets. Successful exploitation could allow the attacker to cause a DoS condition due to CPU and resource constraints. Cisco Bug IDs: CSCuv34544.

Affected configurations

Nvd

Node

ciscounified_computing_system_central_softwareMatch1.4\(1a\)

VendorProductVersionCPE
ciscounified_computing_system_central_software1.4(1a)cpe:2.3:a:cisco:unified_computing_system_central_software:1.4\(1a\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	unified_computing_system_central_software	1.4(1a)	cpe:2.3:a:cisco:unified_computing_system_central_software:1.4\(1a\):::::::*

CNA Affected

[
  {
    "product": "Cisco UCS Central Software",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco UCS Central Software"
      }
    ]
  }
]

References

www.securityfocus.com/bid/102787

www.securitytracker.com/id/1040249

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-ucs

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

61.9%

JSON

Related for CVE-2018-0094