漏洞标题
N/A
漏洞描述信息
在某些Cisco Catalyst交换机的某些型号上运行的Cisco IOS软件的简单网络管理协议(SNMP)子系统可能存在一个漏洞，该漏洞可能导致 authenticated 远程攻击者引发拒绝服务(DoS)情况，即GET MIB Object ID拒绝服务漏洞。该漏洞是由于受影响的软件处理包含对CiscoFlashMIB对象ID(OID)请求的SNMP读取请求时可能出现的一种情况。攻击者可以通过在受影响的设备上发布一个CiscoFlashMIB OID的SNMP GET请求来触发该漏洞。成功利用可能会导致由于SYS-3-CPUHOG而重新启动受影响的设备。如果这个漏洞影响到运行具有不安全版本的Cisco IOS软件且配置为使用SNMPv2(SNMPv2)或SNMPv3的 Cisco设备，则该漏洞会影响以下 Cisco设备：Cisco Catalyst 2960-L系列交换机、Cisco Catalyst Digital Building Series交换机8P、Cisco Catalyst Digital Building Series交换机8U。Cisco bug ID:CSCvd89541。
CVSS信息
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability. The vulnerability is due to a condition that could occur when the affected software processes an SNMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerability by issuing an SNMP GET request for the ciscoFlashMIB OID on an affected device. A successful exploit could cause the affected device to restart due to a SYS-3-CPUHOG. This vulnerability affects the following Cisco devices if they are running a vulnerable release of Cisco IOS Software and are configured to use SNMP Version 2 (SNMPv2) or SNMP Version 3 (SNMPv3): Cisco Catalyst 2960-L Series Switches, Cisco Catalyst Digital Building Series Switches 8P, Cisco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541.
CVSS信息
N/A
漏洞类别
资源管理错误
漏洞标题
多款Cisco产品Cisco IOS Software Simple Network Management Protocol子系统资源管理错误漏洞
漏洞描述信息
Cisco Catalyst 2960-L Series Switches等都是美国思科（Cisco）公司的交换机设备。Cisco IOS Software是运行在其中的一套操作系统。Simple Network Management Protocol（SNMP）subsystem是其中的一个用于网络设备管理信息交换的简单网络管理子系统。 多款Cisco产品中的Cisco IOS Software的SNMP子系统存在资源管理错误漏洞。当设备配置有SNMP 2版本(SNMPv2)或SNMP 3版本(SNMP
CVSS信息
N/A
漏洞类别
资源管理错误