CVE-2018-0378

N/A

Description

A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of protection against PTP frame flood attacks. An attacker could exploit this vulnerability by sending large streams of malicious IPv4 or IPv6 PTP traffic to the affected device. A successful exploit could allow the attacker to cause a DoS condition, impacting the traffic passing through the device.

CVE Details

CVSS v3.1 ScoreN/A

Published10/17/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

cisco:nexus_5548pcisco:nexus_5548upcisco:nexus_5596tcisco:nexus_5596upcisco:nexus_56128pcisco:nexus_5624qcisco:nexus_5648qcisco:nexus_5672upcisco:nexus_5672up-16gcisco:nexus_5696qcisco:nexus_6001cisco:nexus_6004cisco:nx-os

Weaknesses (CWE)

CWE-20CWE-20

References

http://www.securityfocus.com/bid/105669(psirt@cisco.com)

http://www.securitytracker.com/id/1041920(psirt@cisco.com)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-nexus-ptp-dos(psirt@cisco.com)

http://www.securityfocus.com/bid/105669(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1041920(af854a3a-2127-422b-91ae-364da2661108)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-nexus-ptp-dos(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.