Lucene search

CiscoCVE-2019-1977

HistoryAug 30, 2019 - 9:15 a.m.

CVE-2019-1977

2019-08-3009:15:20

CWE-371

cisco

web.nvd.nist.gov

cisco

nexus

9000 series

switches

aci

vulnerability

dos

remote attack

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

52.6%

JSON

A vulnerability within the Endpoint Learning feature of Cisco Nexus 9000 Series Switches running in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an endpoint device in certain circumstances. The vulnerability is due to improper endpoint learning when packets are received on a specific port from outside the ACI fabric and destined to an endpoint located on a border leaf when Disable Remote Endpoint Learning has been enabled. This can result in a Remote (XR) entry being created for the impacted endpoint that will become stale if the endpoint migrates to a different port or leaf switch. This results in traffic not reaching the impacted endpoint until the Remote entry can be relearned by another mechanism.

Affected configurations

Nvd

Node

cisconexus_9000Match-

cisconexus_93108tc-exMatch-

cisconexus_93108tc-fxMatch-

cisconexus_93120txMatch-

cisconexus_93128txMatch-

cisconexus_93180lc-exMatch-

cisconexus_93180yc-exMatch-

cisconexus_93180yc-fxMatch-

cisconexus_9332pqMatch-

cisconexus_9336c-fx2Match-

cisconexus_9336pqMatch-

cisconexus_9348gc-fxpMatch-

cisconexus_9364cMatch-

cisconexus_9372pxMatch-

cisconexus_9372px-eMatch-

cisconexus_9372txMatch-

cisconexus_9372tx-eMatch-

cisconexus_9396pxMatch-

cisconexus_9396txMatch-

cisconexus_9504Match-

cisconexus_9508Match-

cisconexus_9516Match-

AND

cisconx-osMatch12.3\(1h\)

cisconx-osMatch13.1\(2m\)

cisconx-osMatch13.1\(2o\)

cisconx-osMatch13.1\(2p\)

VendorProductVersionCPE
cisconexus_9000-cpe:2.3:h:cisco:nexus_9000:-:*:*:*:*:*:*:*
cisconexus_93108tc-ex-cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*
cisconexus_93108tc-fx-cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*
cisconexus_93120tx-cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*
cisconexus_93128tx-cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*
cisconexus_93180lc-ex-cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*
cisconexus_93180yc-ex-cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*
cisconexus_93180yc-fx-cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*
cisconexus_9332pq-cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*
cisconexus_9336c-fx2-cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	nexus_9000	-	cpe:2.3:h:cisco:nexus_9000:-:::::::*
cisco	nexus_93108tc-ex	-	cpe:2.3:h:cisco:nexus_93108tc-ex:-:::::::*
cisco	nexus_93108tc-fx	-	cpe:2.3:h:cisco:nexus_93108tc-fx:-:::::::*
cisco	nexus_93120tx	-	cpe:2.3:h:cisco:nexus_93120tx:-:::::::*
cisco	nexus_93128tx	-	cpe:2.3:h:cisco:nexus_93128tx:-:::::::*
cisco	nexus_93180lc-ex	-	cpe:2.3:h:cisco:nexus_93180lc-ex:-:::::::*
cisco	nexus_93180yc-ex	-	cpe:2.3:h:cisco:nexus_93180yc-ex:-:::::::*
cisco	nexus_93180yc-fx	-	cpe:2.3:h:cisco:nexus_93180yc-fx:-:::::::*
cisco	nexus_9332pq	-	cpe:2.3:h:cisco:nexus_9332pq:-:::::::*
cisco	nexus_9336c-fx2	-	cpe:2.3:h:cisco:nexus_9336c-fx2:-:::::::*

Rows per page:

1-10 of 261

CNA Affected

[
  {
    "product": "Cisco Nexus 9000 Series Fabric Switches in ACI",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "12.2(4M)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nexus-aci-dos

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

52.6%

JSON

Related for CVE-2019-1977