漏洞分享 - 思科 NX-OS 存在阻斷服務漏洞

                                                                                                                              

 思科 NX-OS 存在阻斷服務漏洞

一、摘要

        思科 NX-OS 存在多個漏洞，允許遠端攻擊者利用這些漏洞，於目標系統觸發阻斷服務狀況。

二、存在風險

        思科 NX-OS 存在多個漏洞，允許遠端攻擊者利用這些漏洞，於目標系統觸發阻斷服務狀況，其影響系統或版本如下：

• 受影響之系統：
• N3K-C36180YC-R
• N3K-C3636C-R
• N9K-X9624D-R2
• N9K-X9636C-R
• N9K-X9636C-RX
• N9K-X9636Q-R
• N9K-X96136YC-R
• Nexus 3000 Series Switches
• Nexus 5500 Platform Switches
• Nexus 5600 Platform Switches
• Nexus 6000 Series Switches
• Nexus 7000 Series Switches
• Nexus 9000 Series Switches in standalone NX-OS mode
• Firepower 4100 Series
• Firepower 9300 Security Appliances
• MDS 9000 Series Multilayer Switches
• Nexus 3000 Series Switches
• Nexus 5500 Platform Switches
• Nexus 5600 Platform Switches
• Nexus 6000 Series Switches
• Nexus 7000 Series Switches
• Nexus 9000 Series Fabric Switches in ACI mode
• Nexus 9000 Series Switches in standalone NX-OS mode
• UCS 6200 Series Fabric Interconnects
• UCS 6300 Series Fabric Interconnects
• UCS 6400 Series Fabric Interconnects
• UCS 6500 Series Fabric Interconnects
  
  

三、建議改善措施：

           企業及使用者如有上述漏洞版本應盡速更新。

    情資報告連結：

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ebgp-dos-L3QCwVJ
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv6-mpls-dos-R9ycXkwM
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-lldp-dos-z7PncTgt